last executing test programs:

18.391228783s ago: executing program 2 (id=1568):
socket$netlink(0x10, 0x3, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$evdev(&(0x7f0000000000), 0x104, 0x100)
fsopen(&(0x7f0000000080)='qnx4\x00', 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x140003)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0)
recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x600)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000003c0)=0x1008, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a})
ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, 0x0)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01)
ppoll(&(0x7f0000000400)=[{r0, 0x42}, {r1, 0x200}, {r2, 0x5040}], 0x3, &(0x7f0000000440)={0x0, 0x989680}, &(0x7f0000000480)={[0x1]}, 0x8)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x4400, 0x4)
getsockopt$inet_sctp6_SCTP_NODELAY(r6, 0x84, 0x3, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x6)
ioctl$TCSETSF(r0, 0x5404, 0x0)

16.962691327s ago: executing program 2 (id=1572):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x3ef, 0x0)
syz_open_procfs(0x0, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0)
ioctl$FBIOBLANK(r4, 0x4611, 0x2)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff1801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0xffffffffffffff40, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x7, 0xf, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000780)=""/15, 0x60fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200003}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)

16.867699336s ago: executing program 1 (id=1573):
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='tmpfs\x00', 0x8, &(0x7f0000000100)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x4000)
setresuid(r0, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
unshare(0x22020600)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0xee00, 0x0)

15.122336402s ago: executing program 2 (id=1576):
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r1 = dup(r0)
fanotify_init(0x1, 0x101000)
close(0xffffffffffffffff)
r2 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c6d73697a653d30390ff9d08e2f677a5968603b094bd227783030"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setownex(r1, 0xf, &(0x7f0000000000)={0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000060000000100", @ANYRES32, @ANYBLOB, @ANYRES32], 0x50)
unshare(0x20000600)
r4 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r4, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f0000000380)=""/243, 0xf3}], 0x2, 0x2, 0x3f2f07da)

14.928091278s ago: executing program 1 (id=1577):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r2=>0x0, 0x33d7, 0x7, 0x1}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2}, 0x8)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x19, 0xe017, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", ""]}, 0x3c}}, 0x804)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x7, 0x0)
read$msr(r4, &(0x7f0000000240)=""/17, 0x11)
mq_timedreceive(r0, &(0x7f0000000280)=""/229, 0xe5, 0x9, &(0x7f0000000380)={0x0, 0x989680})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000003c0)=0x8, 0x4)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4)
copy_file_range(r5, &(0x7f0000000440)=0xfff, r0, &(0x7f0000000480), 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000004c0)={r2, 0x2}, 0x8)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x7)
recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/198, 0xc6}], 0x3}, 0x401}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)=""/219, 0xdb}, {&(0x7f0000000880)=""/111, 0x6f}], 0x2}, 0x3ff}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/4, 0x4}, {&(0x7f0000000b00)=""/210, 0xd2}], 0x3, &(0x7f0000000c40)=""/255, 0xff}, 0x5}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/12, 0xc}, {&(0x7f0000000d80)=""/111, 0x6f}], 0x2}, 0x3}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/172, 0xac}, {&(0x7f0000002000)=""/224, 0xe0}], 0x4, &(0x7f0000002140)=""/254, 0xfe}, 0x7ff}, {{&(0x7f0000002240), 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/142, 0x8e}], 0x1}, 0x8001}], 0x6, 0x20, &(0x7f0000002540)={0x77359400})
r7 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x0, 0x10)
recvmmsg(r7, &(0x7f0000002e80)=[{{&(0x7f00000025c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002640)=""/233, 0xe9}, {&(0x7f0000002740)=""/100, 0x64}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/152, 0x98}], 0x4, &(0x7f00000029c0)=""/59, 0x3b}, 0x6}, {{&(0x7f0000002a00)=@nfc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a80)=""/186, 0xba}], 0x1, &(0x7f0000002b80)=""/125, 0x7d}}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/223, 0xdf}, {&(0x7f0000002d80)=""/89, 0x59}], 0x2, &(0x7f0000002e40)=""/53, 0x35}, 0x5}], 0x3, 0x0, &(0x7f0000002f40)={0x77359400})
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000003100)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xe8, 0x2, 0x1, 0xeaf9159911db9822, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x608}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x88, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040005}, 0x20008000)
sendmsg$nl_route(r7, &(0x7f00000032c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003280)={&(0x7f0000003180)=@mpls_newroute={0xd8, 0x18, 0x2, 0x70bd27, 0x25dfdbff, {0x1c, 0x14, 0x10, 0x4, 0xff, 0x3, 0xff, 0x8, 0x1a00}, [@RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x21, "0c3b4a267d76c5e5763763d80cd3"}}, @RTA_NEWDST={0x84, 0x13, [{0xdaba7, 0x0, 0x1}, {0x10000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9}, {0x5}, {0x100, 0x0, 0x1}, {0x1d, 0x0, 0x1}, {0x5}, {0x5519}, {0x5, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7}, {0xb9c, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x97}, {0x9, 0x0, 0x1}, {0x7}, {0x1}, {0x40}, {0x1}, {0x53f5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xb}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_VIA={0x14, 0x12, {0x9, "4c3c15c630ad5ed2cdc1b91202a4"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc804}, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000003300)={0x2, 0x1, 0x2})
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000003340))
syz_genetlink_get_family_id$tipc2(&(0x7f0000003380), r7)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000033c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, &(0x7f0000003400))
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f00000034c0)={0x2, 0x8, 0xd497, 0x1000, <r9=>0xffffffffffffffff})
sendfile(r0, r9, &(0x7f0000003500)=0x8, 0x0)

10.431607125s ago: executing program 1 (id=1582):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
write$char_usb(r0, &(0x7f0000000040), 0x0)

10.431077973s ago: executing program 3 (id=1583):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
acct(0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfd}]}, &(0x7f0000000240)='GPL\x00', 0xe}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

8.891843348s ago: executing program 0 (id=1584):
syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002580)=@newtfilter={0x9c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_U32_SEL={0x64, 0x5, {0xb, 0x8, 0x7, 0x7, 0x0, 0xefdf, 0x2, 0x84c, [{0x4, 0x8000, 0x1, 0x32ec}, {0x9, 0xc3b, 0x80000001, 0x4}, {0xffff, 0x4, 0x2, 0x9}, {0x3, 0x8, 0x5c, 0x4}, {0x1, 0xeb, 0x401, 0xd}]}}]}}]}, 0x9c}}, 0x24040084)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x32, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x4, 'wrr\x00', 0x7, 0xbe, 0x40}, 0x2c)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
open$dir(0x0, 0x105000, 0x53)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, 0x15, 0x301, 0x70bd28, 0x25dfdbfb, {0xc}, [@typed={0xc, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14)
setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f00000000c0)=@req={0x9, 0x8000000, 0x0, 0x8}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000097292e912dbc6ddfb0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000700ac1e00010a000100aaaaaaaaaaaa0000"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bind$can_raw(r0, 0x0, 0x0)

8.890545784s ago: executing program 3 (id=1585):
unshare(0x22020600)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$midi(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, 0x0, 0x0}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)

8.812866035s ago: executing program 1 (id=1587):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='task\x00')
fchdir(r0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r1, 0x0)
wait4(r1, 0x0, 0x2, 0x0)

7.502219504s ago: executing program 0 (id=1588):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f0000000280)=[{r0, 0x6068}], 0x1, 0x0, 0x0, 0x0)
getpid()
r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x294, 0x2, 0x80000003, 0x6, 0x2b, 0x2006, 0xf4, 0x8, 0x80ffa, 0x2, 0x7, 0x8504, 0x1003, 0x8, 0xf, 0x9, 0x63, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x0, 0x8, 0x3ff, 0x10, 0x4, 0x5, 0x8, 0x0, 0x2, 0x5ffd, 0xfffffff9]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
epoll_create1(0x80000)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x0, 0x0)

7.437867447s ago: executing program 4 (id=1589):
syz_open_dev$tty20(0xc, 0x4, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b0000000600000001000100090000000100"], 0x50)
add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe)

7.376460207s ago: executing program 1 (id=1590):
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002)
capset(0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1)

7.315057615s ago: executing program 2 (id=1591):
unshare(0x22020600)
syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
socket$nl_route(0x10, 0x3, 0x0)
syz_usb_connect$midi(0x0, 0x0, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2c}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r1}, 0x0, 0x0}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
file_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0)

6.014879858s ago: executing program 4 (id=1592):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x508})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010200000000000000000a000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0xe0}, 0x4040)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
r3 = signalfd(r0, &(0x7f00000006c0)={[0x6]}, 0x8)
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0x4004e502, &(0x7f0000000700)=0x80)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
r4 = getpgrp(0x0)
syz_open_procfs(r4, &(0x7f0000000640)='net/sco\x00')
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x5c)
close(0x3)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x44, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4008145)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="06000000040000000320000002"], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x5a8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1)

5.28156404s ago: executing program 0 (id=1593):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={<r2=>0x0, 0x33d7, 0x7, 0x1}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r2}, 0x8)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x20, 0x17, {0x19, 0xe017, @l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, ["", "", "", "", ""]}, 0x3c}}, 0x804)
r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x7, 0x0)
read$msr(r4, &(0x7f0000000240)=""/17, 0x11)
mq_timedreceive(r0, &(0x7f0000000280)=""/229, 0xe5, 0x9, &(0x7f0000000380)={0x0, 0x989680})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f00000003c0)=0x8, 0x4)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4)
copy_file_range(r5, &(0x7f0000000440)=0xfff, r0, &(0x7f0000000480), 0x4, 0x0)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f00000004c0)={r2, 0x2}, 0x8)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3)
ioctl$KVM_SET_NR_MMU_PAGES(r6, 0xae44, 0x7)
recvmmsg(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/84, 0x54}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/198, 0xc6}], 0x3}, 0x401}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000780)=""/219, 0xdb}, {&(0x7f0000000880)=""/111, 0x6f}], 0x2}, 0x3ff}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/240, 0xf0}, {&(0x7f0000000ac0)=""/4, 0x4}, {&(0x7f0000000b00)=""/210, 0xd2}], 0x3, &(0x7f0000000c40)=""/255, 0xff}, 0x5}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/12, 0xc}, {&(0x7f0000000d80)=""/111, 0x6f}], 0x2}, 0x3}, {{&(0x7f0000000e40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000ec0)=""/91, 0x5b}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/172, 0xac}, {&(0x7f0000002000)=""/224, 0xe0}], 0x4, &(0x7f0000002140)=""/254, 0xfe}, 0x7ff}, {{&(0x7f0000002240), 0x80, &(0x7f0000002380)=[{&(0x7f00000022c0)=""/142, 0x8e}], 0x1}, 0x8001}], 0x6, 0x20, &(0x7f0000002540)={0x77359400})
r7 = openat(0xffffffffffffff9c, &(0x7f0000002580)='./file0\x00', 0x0, 0x10)
recvmmsg(r7, &(0x7f0000002e80)=[{{&(0x7f00000025c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000002980)=[{&(0x7f0000002640)=""/233, 0xe9}, {&(0x7f0000002740)=""/100, 0x64}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/152, 0x98}], 0x4, &(0x7f00000029c0)=""/59, 0x3b}, 0x6}, {{&(0x7f0000002a00)=@nfc, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002a80)=""/186, 0xba}], 0x1, &(0x7f0000002b80)=""/125, 0x7d}}, {{&(0x7f0000002c00)=@isdn, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002c80)=""/223, 0xdf}, {&(0x7f0000002d80)=""/89, 0x59}], 0x2, &(0x7f0000002e40)=""/53, 0x35}, 0x5}], 0x3, 0x0, &(0x7f0000002f40)={0x77359400})
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000003100)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000002fc0)={0xe8, 0x2, 0x1, 0xeaf9159911db9822, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x608}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x20}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}, @CTA_NAT_DST={0x88, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040005}, 0x20008000)
sendmsg$nl_route(r7, &(0x7f00000032c0)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003280)={&(0x7f0000003180)=@mpls_newroute={0xd8, 0x18, 0x2, 0x70bd27, 0x25dfdbff, {0x1c, 0x14, 0x10, 0x4, 0xff, 0x3, 0xff, 0x8, 0x1a00}, [@RTA_DST={0x8, 0x1, {0x2, 0x0, 0x1}}, @RTA_VIA={0x14, 0x12, {0x21, "0c3b4a267d76c5e5763763d80cd3"}}, @RTA_NEWDST={0x84, 0x13, [{0xdaba7, 0x0, 0x1}, {0x10000, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9}, {0x5}, {0x100, 0x0, 0x1}, {0x1d, 0x0, 0x1}, {0x5}, {0x5519}, {0x5, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x7}, {0xb9c, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x97}, {0x9, 0x0, 0x1}, {0x7}, {0x1}, {0x40}, {0x1}, {0x53f5, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0xb}, {0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x7}, @RTA_VIA={0x14, 0x12, {0x9, "4c3c15c630ad5ed2cdc1b91202a4"}}]}, 0xd8}, 0x1, 0x0, 0x0, 0xc804}, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000003300)={0x2, 0x1, 0x2})
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$HIDIOCGFLAG(r7, 0x8004480e, &(0x7f0000003340))
syz_genetlink_get_family_id$tipc2(&(0x7f0000003380), r7)
r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000033c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r8, 0x400454a4, &(0x7f0000003400))
ioctl$vim2m_VIDIOC_EXPBUF(r7, 0xc0405610, &(0x7f00000034c0)={0x2, 0x8, 0xd497, 0x1000, <r9=>0xffffffffffffffff})
sendfile(r0, r9, &(0x7f0000003500)=0x8, 0x0)

5.220076289s ago: executing program 4 (id=1594):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000023c0)={0x18, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21106}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000fddbdf2504000000080003000300000008", @ANYRES32=0x0, @ANYBLOB="1400edfe667c1235f9d7134a0004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000090)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x274c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2724, 0x4, 0x0, 0x1, [{0x460, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x450, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x400}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPRESSIONS={0x418, 0xa, 0x0, 0x1, [{0x368, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x354, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x350, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "8ea6c996b2b1471e3e8aa983a64a80fcffcdf179fab6ba92fcab78473f5f2e6caa1c262378669c1f42b3cb60f0f9d79d420cfa68e1cb1f4bb32b"}, @NFTA_DATA_VALUE={0x7d, 0x1, "1246347b49e924b5d3278fe3d2947afbda4f2f81f77408cdedfa03f48e77f30c3a3f64744e3b7e23301a61875ba3f840b855e082788ceaf6b4dfb8bfb4166ab88f7eb692dd5d0e7c293ac1c458c045e95cfb617bbf076c4a7b60d8f13ebc20185db09b93cd716fd9f7d162dda8591d09de4fe60433a28c5944"}, @NFTA_DATA_VALUE={0x14e, 0x1, "758cf6f9ef18c155960c5f17a21d0f11f7a3631621862b2d54f5e7e744a0b2df631fad99399daab39342b37e2e68e99b3ba1acd6e0a678d94b1489a384956b106585746e9b71a11194880a94a4f14cdee6383c74b881b9c347e3d9c548e7014122aaf402111001959bf16c253c9efad4965ef0ccfa3c57c821f0da8bc46117d044e9ac709cd298de61f201f8363dee91c32dfedc80c66556108b7e809878b3e44700ff30b413de6f7f8b2720e4c03e3f19466c0e10aaa95404e90171e7cd2fde33ba4d215352e60336bf66bb6e729014c30e35f9c6f9285eacdd605f3449025d7e5a41a37a65d2abe0631000f351e08335eb88edf1255cce732008c8317b51511542dbeae4b011c5b8973e3ed6b5922f403804482528b365e639ea72a72586405012d2a48a08878c6452695804090695f890532be2f9b06f0eb639da21dc5f6d1c5738c4a1f59857d709"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x22c0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x22b0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x2294, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "ef0934f1fef31333cb8f929a5a35f55d2371bdd46a91867280895beb05549ec9f5260c584caa245afbfe7f458f0e61a144779eb8e0c7ddcfbdce8a6fea5514a621ed108f7def0a0dfea1fe296d4954887008338fa2efd2592c0e6ec1a9001641e0eefaeb83e207acd053d6090f004f688f1725b7f981317c5907a555f64333443f45ddf4181a8cf304e52ed85bda284e87a3016cbdd40f9d372c8bb21a8b8429fbe914d7c5a27b39abd640e2e4fd2857bd52898c317404d66aa210578d6c03c8e55c6df79924cb570f0f564af75008b960835550db90dc45cee4b1a79cb629105dbdeeae2dc811ac5f641a22e5311da218358dc8ae303e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "e01adf197bfa73c5584afe071ea6ed755bf61b716b82621633ac4b068e694a500ad12af5231ff1f0e04b2096d8d3bd0be8dcb8dda9961c43765f4421f63f5c3e8f5ee55e63ed6c29a80ea0f4134f90c37734b8559d7e68300fa806178d668f2e7e8edf0e08ff0c945bab15d13e4f7b7872b51aa3443792ffdb486a39a9bda8ccb66f30a8572bf1587276de15ee6736098594dc6b2152302c8c3accff2c5940ef9942e172a73fe543bd2c67a9c6b42145f507f67b4a0e4636759511b53a7e307e7a6d49d7f64c7cac337b60b56dfafcba490b494e0ae13463cbb3677825d425489bc9560a708abc2c220da9cad1f555346f3d3e2357c9129db6d23a0098411e1dc9efb59cf9b437f0c9c7a3bbd3f131990d5a4667275a1c8df307743e12259412973bf1c278def4805429b91be6b15aa638ca7d573186e4479281320eaf190363cb7e4237100aa066cd49c7f82ba5ff689f7848a5bb2f391a42e82eaf2df3741aac6e23c18a8e7d5c43437395a927c0c524dcb250ccdc6a9d1bcd2c9e2d2a54cf163cab40af9d843d24364368b9ef4cb72e58b4a7460f0bb8354133aca05d528c1d2bb6c97bb1cf203799386dfd56c78a4322b3e9a636e1d41617587617885e225c36e8e4753692283d2266658b448d30cee3fc60fcae45fdddafd5675ac3f140ee8e4a8f2cfef94fefbeb74ca7fd30ff70e950f90bdc48903cc045d655830fe0b8983827382e8eb419ef7e10407b261b4521ac072585e6acf59f3245cc2a7f9d9dd640a3d41ff440594b1783945d1de51b509b7418c8b9855c9af89ecd8e4d11cf49273a46e0b3ac583fe19628d1ff35806d9778c4d8b9d0a503a18bb90d2fe0837e91c4a02ef5926540ef4d561a69cf10c8e08f43eca5b0088f4a02fff478ca964fd2d570becc4ae83c640571ea363dabcf1954d7cce1fa9d69573aa8152ddb1513b61894b239b4c6d53647fc3021c9c0d5815447e4e1dfc93db0c6d38d8445182230bbe8b2cb3d802be997c59200d1d776d92d1b08356e71a85c0f22341043a0fe8b548cee06b773bbc5c3cf91cc76d4cafa6ce15c2a8689bbbde4a6e8edca42525cf838f12006bca4690b8b77c905e8ae1483367f64044a2aa5b88e70faa0898ef8a353a1311a275555a03fc9e5c9a8e6244a840982bff3c0c33d58b9a6b8af715b0bffd4f5dc920665c99422c2bc4e0e6d7f04597e6a7f923f7ad747eec925350a902dfcc9829848be757deaa63d3acae5b91ebdbce89ad97e0273ea2d000a018a586d376dfadac2ab30b3599ab09414a7035b55055fcc1b4a131e754d01bcee07295f7732ae44646182e0a77dcc545db97247cdcc7b9cf585633b704acd38e4970be3c54025223cd359ed9452a921cb73fc97524fe70badca16c21a62170d82b689caa04659a4b51015fe6eeb3e9c54a5d26498a63bf9a7686521211de9a28b94761db07d611fc229bb3a6d7230ecf53b022e1ac6361e141a8193e99a263cd19389b9c8a8a226b09031fc1ba1c88486eff551999f0fcafcbdb0633109d358f37550497d58727eab0d6b3b88b917a2ff6b67e84864319cd8dcba4da4037b558735a5ae920d975afda380f5fd6233ead13c301514a8be22ca8d8b9ffd8844137b6dbad812fd1533b25d125f90d04951a676a22126bcc995d26178bf006b6afabc4fede40f025e9eaeb273e41dabcd6f5367cc021848d7b1e5f01a900f88014be5215aa13d6031bc8c42db7ea43f5b951873daf8887549b56c3fd24d665fe9f8f4a0e3ba649d38236fb23c00f8580ee726d78d55ac9ae3c2fbefb92a2c4a0052526d39849d4c6d112fee649642ebdebf23dfdc5aff8f469fd088fc48bfb38b531db024b4fa58476207ace01494bb719c15ffaf92ef36194a82c0b2650d5f41c610da7be3585113ca8fc08c412fa7de9d525f57ad7403e22e3c8fb4532853fb69fef7a458084e20d506e3673217a9ec2a690a6c25139758c1ffb631f1ef9eecc2e3758fd1472ed014786acd5485c7312a38c6f1c45ad2f1d6f7efb5cc05487fbaadb2767616034fd0fa9bf59b82bdb978673c5346627981f1de2889bbd3e7d10379e394c8cb9be020705b6e05374cc3cb319f40175d25fa0b3a8eb5c6aba54a5d2071e01265834f0c619df22ce817f4fd9ff7fc39c0c36a536e82d1b24ef914fdee503605885ade48247ecf61a8f89e5e0bc4b5075119e86396932ad4e01023c2562fc2a19b25b283722a75919a68d556c71a487704e163f42d1d6efb76acc8f4539eca4fd948dbce5b98bf21504bfc966ce23e148a934aba33f5e1ad5f19496931c87c072ad623a457f7c922c5593ff0a40026be1e3f6c35f0877751cc3de5bdbdf3c435cdb5be095230b34d92b82372b1d8c6297156f9cdd128cefe5d581f24a0890f6f1ccd509de3622a3e851dea7f26149abeda489f27acb5e9999efe1240ae0deae654f9d37f945f1d871d07d1a33fa9f8a97189beabadfbfb6c8e7b603e38ec7753157259ac684dee4696f4f7f1d4c29207cf2f19226dd95cf3975211b14d8ddb0b3b1e621805e267ef5e1c696864ba524f4d600cc4393f0fdfe9aa44847f6565f26783d574a57211cf143ca63c3630284b17e4da1ec24478dbf08461c9f6abd5ad153d05d3a76a1e66538593efcbe1f476e9bc0bd7be14c3eb6b509d4e03a667dc60f7a57aa9978b24993ed86d480d227b977175f32c544088d550ad5da1c9b5211765a274e1d09b0c0c3edafbbc6d85b36ce70040c90496c0add37e334c2dbb1e7a8421888d5e69fea53bf57183f7378473fffb8d2c98b552918086e877ca6ca30dfb1da60b14e700428a287b4b1a32fd7eadbbd336c5500d260ac9b418cf7b3fd8419e36167b4f8034bfa699042ab0d2260748519b1e1af48e16afa4a44a38a90a1e0013bd6274deb050ca78eda1d43e84bd0f41408f9d3ad6301fe34bf9821eea2d807d1fa744462cac757523c07dc318618f10035b39bd745f99c6ad16438dce66f03bbbb47160f2e48200c1f3e4957180917455791d6d5f6882814001e67cd1c7052f558e766be309aea913b8adb9f5495b3c0ed36c6c34bc002f9c0aafbda049f4e71ea2e5daf1aaa67477ea40b9027a5acf924fcc12b8d5322e9a87bc5efb47b65bd88825e60ca96aeb158b4146b2c53f547e6f0cc817efa52739ffff625a97a35285f6ba7babd1712ae99e898be279300e2d8366b43e2848e66e0f50ffb33cb60d04e913e3c5497c7b8cdef8ed96d10e6f5ee479add853e34623149acd9f77a42cb4c55d9f117995d6b83f0813f2aa46adc8a7fb13dcc3917886d7882937583da4a05e17bb41a8d35e8c44a3f4a8a8d92d781a14d3c28deaae619a149235720ef85ef1a1d0b26b506e88401d12bde7895d1517a708b20495cf8e9cfe1fb4d3999756bc687c89c9d1e73b935133dcdd8b3e6e656d5f16278d2e0f79ab153ccbbd01af20a281a8daf93760c456c6a27b68b62c967ed65f52739d1f4d9756f7084d013ab1b520984bc4fe0f8efda51b061e74709c749137aaf76d917c67a13d5840e8ec0993a506f05cee355c7b97d3d08bcfa7c57f8fcb582f12f49ebfa0f084ee12dfc99072f319230553f4c2bce6b37d80119aaac0b7437cc9a848fd7371b75a9ccdc8e21fe9cdc5663e5b980dcc9a04d1c46a18ef2097620da024e2150e105052c1b0a83e9e053fdc93b8d506d6f22b7369f16b3ec50a5ceb2e08847b3546dfefa8c89a48926826efd8126d3a9a7ec3aa1678e630e66210f5b8c0ea2831bdfb46c08af658597c7d837163db83ddc415da26f4f63faca9ac1ce1beb13b615c5aaae6b3ac990b8b9db1ef8d3dc377cbdcc15ce8dd17e042a0a64da352242d92b7236a9df671bae153349003e208d6887ca37b571e15881bcc0400f60ace6d20357402e707579ae5530b263e355deb99944ebc5975c8610720f8f9e41a1ce1c7b7a9728ca0703a72cda6fc3558c11b4b548061abdb48472647bd8c0f53bd039c0f56093781b669212f9255ea8eb039b00bd80bd990fa0e8ef5fe663ebdf3a470ed89c87fe5c3c092c24bab2ab0c58f3f1e7dd62765e767e7ecaeebe3b788438d00305d7dd430874285e9ca27f51b4d44b53dd42275729c75af4a0372df0cb13eab776f7418f7a97c38c834c1d4dcd2786ac4eebc9ed31bebf5035af98c12db1a68b6383eaf38e77f08396184b259e43a8ad3c4fa866e26f63aff4b031f723685c33bb3feb9908331b029e76bb50f0cb6f0cd3b12a6a87550b1e1d18f2396dc6f1fd360e3d3a8df59020898512ae7acf85ea4d96f461e7f28146385d2537229a89a436e5fda1ea25a3e80bd4faabc97497de43ff062ffc2ae10ecf3938b4fca694d8f3117cb73930c24574c8ab56ec4221180f27dc8b860618fc00fbd8ccc087999f8e29f7e97eb6b7d2a5be2d590c33040944e470fb11cefa4b6ea6acba04a7d51fd46669a59008aed3fa2ae9f9e3bc10d12ca083d8c74040c2e31c89b67d2a7e08305b6415f4061dceea59c80aca7b51070e18863398f0b89d9ed17d7e2ec23cb2c7596fb3cd85bc788bb2f006305078ed2a7a47c7542436a3642e6ffe8a0c42a339b5f4318d74de61211b93dbaf1f92fdab4992fa0f3932669ead193e7cd07fdb157326aff25f2d32244ac12005af14946c756237f518b76e3c7498d8b4307a34457850952a91dd903f0c295ca3e066af72c4c76ba6143018c230f73d74e4f6de88235611de116e3a0f0d69c61d7470cc8e74f2d548e6011244d5759228ffa961367fad5639eb46db5ff451a77659dc855515867e09f0c64760e75feb6587bd9b221eeb84923e996a1eb422ce6ec9ffeb3a822aee27f4848794ff66ca33b4a1717494bbea6ada3976118c078d418de80ec5d96b150ed355f432c6290251c953fd8efc74c24cb515735049ddc67220aa0a154db7d6224c509b36b73b744f00537ec4f7cd404b8c82d345e37014d2c5601fe5611d1df8e8797e985f0c6eff89c719f4ecd91d91c2b5c5a2bbeae655f37cceb6df50586eb1af62e1cd1bfee1bc3a78284778f0aff59c4d86879a371c6cedb683fddf43049e41c25061035cc5002411df5e5ddfaec126ce9f7d91f808e3f1ca9fa28ded66e92f7b430146d78d1f71a6cabbaf80cae9169a976773e061bed9e7083ad18558bb218f28753b8441fffe136b42c760a3bde8c21c5b9319600d65f18a283ed7bf834d68a357792f64f392e2fcb749642eea4a09504056530c64ccb0a9412031f083c64a61ea48c814db1d6638cdc2e9dbb6a5fbb2501f353555d298e20fe7868147008419fcf3e26e57408e708ee347eed1104ac620b12f305fe1802f48c084908c4f65efdf99fd3f50dd907b5977011406a753d86069d6da5090c5327b10620e4a6054a7103a19b882a6441816932dee1b2a3b15d1d34c5f6a9954f2601edd14e699006bf68624335f00277c782f5cb7d2ff62dde44ca26c580dcf5b62585d08e127b57bb8bc1ec888bf074db642804c941b53c614215c86a1a3de2c3cf3a4997257530f20303820dbf32f5f68c00c27264b509b51d1ef64a8af60d832be6d74d3d6ab031399080e66dbee24e03a1cf91dbd5c661d1d86a3d5c01157ff8c825a3ffc8edec5d28f42b5c6032056a75a1d475f263ec391bf21e150728bbf3bccda91fe16d3024b84cce2f0f4b7cd9489c52aa11f484cbb52ac6e328b00ab7d1b3c6368b54a2ceaf4d3e1d15624db233b6eda0260e1e75cdb8b275fa379e66e85e46a0aea1a0162bba02e4e2fb1a73d6d2723cdb09e74e6ac3a529ccb81cffcb56a3ea66"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "c3371f2bc248fea2fcea6da71569f0202454765e69e1eb131ebf6fd20e2131308b129cc15a52d939a35cfdddaa9674ca50e92771d2eabc49a68e89bc19ebe96ef88ca7ecf36025d2e9ba26628a50b91ebf0216b80a2dda0f61899005dace4aaa6158c8add0770577b60ca93e652a6343e2c9cde3e01ebf0154ec687ab7a47e3bf2ff4cbc5432fef8ac3641a62762bbb9222e47b1ce6a5440d02835466b16c20563f412f325a0f9bf5766cb8f5a07fe759a0928aa7451d23bf3514644b3abf71b6a88d88613cc04a3c9a65bd3a3946a81172c7202fa93dcea437a7d7bd926755037ad11d4a6517db968a897c81a37096724e3308970d5430e6990da9be7de94aa9c743fa4eff9aaa2eec8539f82bb12d9cdcf8a47ddc968e3490134dfaab604794b8896f8c79cbfccc6c171cdef42e627d92061c2c2472428a33363bc450cdaaabb5260eef4c8b63a789dbc6801e411afefd4815e117831b3e56512e2ed4b3d42aab076f11d3331a45017c5f248ef97b4c49e3b8c7c0bc19d9c2c3d9c4269ac710214bfc370e0e032650af51d98d59ac9c5e80dd0e73a094c3517e672dfb8e2a126e01096b56f39e51ba5ef961844810061650a92eceec59dbf2054b8ed82fc2ad2fa3c2d15eaf3a6b0e5b5337ece9d163071b0947ad09aaec3aa148cf85ce038b02677efdb432f2f95546e02468e513b33605e1b8b780444eff3fd3a97ca8447853a457e3ca48b30ae8f9ff911b596472097abdd0ad758f1429d6af3b6ae7515beafcba5bbb39cda1f240b1c2d147aaaa31740b3f793f363b72dd097e35168b1556f042ebdc8ecbea44221a27dfb9b74e2aaaae987564c0850921ada0c35a8d4e60e0044a6101b2d9e520c274bde6b6296200fe0d308474f64c0e9d313792022c6616095de564564f99909e732b634fd5a2a8692ae2d2a87c0efc60f08824493556dd500310c0df3065c7971c399d7a2a33d981bc3907e9b6eabaaca6562eee2582a12da09f2657caa695fbae250c6def39fde1c4bd4eb489318606cd7fc098f167d2d04c678c947e404513beeb4150267f8d846593083ff57ca9bda180994b530465384bc85375caabb835741953f1f50ade5bad00fdf7e82f5d452a409d000cff91ebfaa0f7b21979d710d8720308d4231b1c638989ddf559da0e443a365b258b5ece704744d5b0c4ef6ebceecb88d9586f9750301d6554f7ede098012a638e8214e9ae331f83bd1a3319c961f0f75a47156dd0e0ff3642fd331b6de5058b7eb2d18d77c93d50d11d68ed916faa1f943282422dc037ee8985d564ff40d61ef4fbb187b5a6468a3257d57c8f41a313368d7cbe77962c0f359183e67bc01db81531a2fb64ef434cfb3349df2bafc17b38194b68ee5cb8f01a8e705a1238fc2c9f3b3634ffd2c0651528836f84272c5cf78234d143fd0c4fe5ecb7631f3d0553ce3778e8eb693159fa54761b41e9a09f61a3ad940728223f77dff7370da3ec012198cdafaa4c4b5906438285221421f0172808d988f45bd3eccab29696a6759e1b3b9208d0968c73234c49fe77394de9912b7d1785f09b83d4e0a888db553343ec7da0435198f3285e5ef77efbf1759c6cf94fe59723b223ad83b96e84b0c34cd256f171190aaea12893aef5fcb59fbfccf2be10f6a6ff68c3ae26d722b7facf6694757e2eac8c1232ab9ffd44b8f814399faa4a0d1a76db8353f5764fe9def1842681c72f7948f5e4665408a46286372a162fa02be954499909d08b16cda1fdd14e12995e42b2f899ab2cf3758588c1cf37a45117c27b3c74118983f7a87051b3c4e237f214dc4cb5bd83c3acaca73f9797c93511e352f844b4f11c7160c7c62202c15e332d7fecd60dcb956c1a01cb3b2f8a926cf900c49a9c4a4004f2bd2357fa0845311588ca2421de7171d806ac0d98b007abd8d681efdcf9eb7f0084a0fdf663b8dfd976663f8d162ca23f57284ebac94d445f90eb47ab9421cf98f1829bfee53a968ed5dbad84a481e097c9976ffd73650a92d8a3faf291f3302310b53b1bb13e584b8cb03db31cd3c5ee40c417d62bd5ae3c11e11a109c37fe7f1c86a64e79587d1cae33e5b67dced830d13938a99452a81eaf9bf31771c1fdb9edf4ea0ba3a779593a3556f1f761eab0dd46206390306986313c8e6f102c344b947dbd70cf5a075e4cad84498e18c59acbb6df208359de1e2401de49a40f83ba64bc613a832e1465305e2b9e942cbc42dbffdf6d7bbfbaec1d8a7b4657edde5836a10661548a652d5e25ed2dfbde77215fa4b59cdb5c424d657eb6db94edae873bc4d38681ab60ed32d0d665f84bc52fafe644ab9a7ae0f218fe3626c423c09e3078c11c6a63999fb8972eda30c635f18918aa94d87e3ee262c296602b3b385625d4c301f6440b87160be034e1093c7e1ca1e0b823473ef3cf51a0d64be828f9222d31c8198d7e91646030119f8829740b897fe634007c2f404bc79f24f27fab8db3803a1aad5d56bfd83fa21d7e878d69bae7a81caa4e78c20de37dd91a29d58043daa5d1beece5a863e82e5c54d53c6fce1d67cacc647e29d00189cfddf2a48c4fed50e7a2d3271408683252486209f18ed290eabf1778aed957fc19aaea5e30bd4de206ca026de4a7359849dd63571a05e8aac27c4ce069d23776a1e376f773037997d4cd711e8a2b3c3aaf319a55b6d36c9ccb938ec3d58785d77269ac9ce5c1e915f9cd9850eeeefc01cc303dd2696b985baec75caa544333792a35b8f324e102b2da1983c7bc86e474d1ad133f02336d8309a21cd218f5d8ea206019b11f0a984470f320b569fedec6f2ee17802170d80b156ddd0f7cbc0bd4336f212af6a7885520ca9f51faedd06c21058a3932eda0f39f154035fabacad1954da19832a4c6a8e674e5db290fb0f0519f086aa9a81a067b8ffb0ed6c28474565ac3f1b3061c86b037e912b20f867f48a81ec3ddc4f971a38fc172b3072fea044002500eeb8a7638640841ae05cb4f6df46bc7a45120ee22605043aa631645c47e2907d4d786a7f4c9ca999dfe2bc58f778e32ae5233fcf1a2db95205864d03a22fbff02281dffbae008cf11f1161a043eac889cc53f64c5b4a9b5eb6a3553efaa8864736fdcfcd613e4bac031612f4791571897da7dde0f2c56f9466362895280245f03d5c9ef3e7a8f5fa2ef6bd125f58fb99763a622bf51f539a39025a2eac38c47f8f29d326eaefd95a6ab864c9a7960ba33913c50c36fbd0214915dfba7595bb00e05ef9737aa9c5631daffbbdad1cbbe3a136cf9e01568b52cc9d5fcd87a983a87db603393fa115f6f16d4240c8fcedf7b32fc40972c67295e79aeab71b8439c775e0f042f00e6715ae2b93d688bcd6c0af683971086dcda5f9173a46987d9fc0b8ef6f29d1f55f8b7828162aa99aa88c5e23f41746937f4799f77fb93721c0a829ba31b9fc4c9ff9d988ac718ac3cfd8de4b8f8aed258a79879ed2fc4fe9ced45dab7362ed8128e6d11027f3152f1a27a6c1a9f6922f45e9cf7a81312be98da2c0172429b703ad11472ae01cafcd5eb2260728582cd3e64d738c6de4ac282758b8079aff057a2e418afa1f1d31895e5b3814e4bf9cb4951d8da14a072536c85ab3654167a57277998f9062f98ca986de37b98f949547ca55c1ab5102bf482dac8d267ddfd00dac2b40b80d8eae00ab9bb6fd6759161099e0b7aeb07932daab586f3882d1b367e62173ed5cfa0fbf1867a1841ae197f36d13c25b44e8b0a240010d19f7a0c065205da1081c53361e2739415857272981e2cbb3c06e7cd7e8b5d9ee268ff895d7bea03f00eb093b245e9df8c0d56ab61477cf6cd729f071b0c4bd9085af15cb71406bd63b95b2430b6313e66b8e9967f1bccf17366c6ed5a5ac689f1040f5933cc925cc8cd378a90f1372c500e73f577056b398942e834b6ebd81330503d658b8c5055ed42cb0cf75b1f3abae54f549a0d8e4e4e03819c6b8d1945807e145fee8619833a096c31d96bf46029145332c1507ddcfb8268afcd199c33bd5ac763c8a42f94b7ebdb05bbae1a4e6f05272fe24a7e62d9ae7bac6737f3ac48a245249ef6a04981b78570f3e7de56b3445b8cd8389303753a8d190cbc0f8c69bf8948b5d568ac2bd19f2046b86e137dcb8f9f74bb7ecfb01d5a4fdb9c7a5ef449196c93e78d339f6003679c5e06909b23001bf086da63a2ab7078e74ecd37de802c5781d2a26faffaeb1ad48717326caf7b7839817398211822d30e2cb1b0355955f8ec77c34f72e6016097e320b8b932887891383621c4b460a9a6ab83c2df7b9e48bf66a2f3c4406b9471a469bcdc38ff0fce3324ca431d17b999d490f9f1f1141777286aaf40cd34e49e0df785502fe737544d23113b5d1c2acab39805d27bafd37da264e08b0d4d5575b83bfca632ed84a22d8b586b9626ad882139aab81ef57ec2d6531e04db8194425ceb84ea84ac106de0df8a6e2239d8dd798314aad9ceb2b441c19c0994d347a16aaf7b155308ddb56b3173513c0d93a32171308b5bb8906a476f7a5098f84a4a8557ea3579ea8a6631e3082e96f3311251d4fa28c84e469a62ae1939725c7c7a6db8e5897ca9ab8e530ec823fe85e54ed4a7e8d1d6bb81ca3f6b8429f65b84c581b0d735a7dbee171932ff565aa38febf5820321b8cbe5f48b3c3630855812ff907b0fd026270f903c6d607653578690bd8d7217cd85b613d4e098739e41486fdb12f7b2db9793233419de0607ba8f3f6487f8996f891af3e699ebde62d7bd2c01efe804566126e8d8dbfe336341f4415ddb7c5cd3a87900f28368ab36a32df8a76bf48ff7639f8c5114a1119667ed116b927c030ee48a9687741993ca641344d1d9ac290e1c8003222ecd1e724490514dae5cd5dcc6c181d50ff96f3c41b941cd6fe045a27baadad8ba4928dc356f724e31908c8a9e8981167b64cfa417e718f0a8884e7455168f3d661343b68b693879fa229502b56f70e70f3aa9c31eccadacf825b45176303d490f1b91744627213fd0b5105f146fd5a45cc26f59c24fdde2862d3621d4cc6cdeeeeed1b10e4f51bcc849900c7db8d2329c1d6b517e2c1da7efea219335cf47976d11a096715f65218b485118c4840ae6839cb417684272501d413b11e82a433a086ea03f1c8e58afd4bf63a29f109d9bdca04eaef7b3a8bb1aa7a55bd366ac35bcd685b2e04cf299915df5a41eeab7e6f0657e567af5fb18e0f2abea4638d7b998af66bfe53ec6dce7bc17d8d18a327812a9da5bd7ca589d4a549fb35168ff0d3d6b8f95d9c9da7b6817ff4b214e713df6bf14aa6077bc5dc32c25289b0c6a50a0e996f97cf5509c0553620d37195850c97fb816fe3cc3d7f50f75ade07adaa26a5066a756c1ee1eed73717cf1d0779cc35fa499ce90ac791a162f0ad97aa1b8ac7b69529ad491a2ecaee574786f2f1ae828513e3d78bd1a9251c639a7fc1be0fac01be146bcf0c590c1c0dd150ffea31b9717fc2b36d125f8c0f02cf6ebad4de5d9f767975447f4533f09f6f7dca58f6048e3f8420c1ed3bfb4d59aa22f4cfb0c42f396359861262d32653b01f73b9cce3074d70b5018159144298d37322ed1c5066d28d5aa5a83017a6224f53a2f71a567124e6d0130a6c4ec12790fca631e66560d1c50192824199728382c626b8275d89232b3d271466ff81f62daad9f95ef18557c9781d35ed9d62b09b33183ee6a34a3fb0cc1d73a483e517e9d4a4b771dd7e20cb75f8a7224caec4c7f624fda9bc99ca850988f4e0f3325fd17dcb921e5ec3bea0940eede19a690b"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "c9ffa004533c9a76546de119960deb364bb846e31f9f247a3c8e72d5fb153438451e91877a461b2433051104ec5aafa499ea8ae7ed6e6267081a35df25cfe113228a27e892dd57b580a77d43c8c4a4f387437d045a63eccb5b11566289ea1999d564fbea4f504cff8c442dbbee30baed89828590b9b827fb67c0294559c3e4d92949ffb5d6ed072829ac45175b061428aeb1c9dd0e49929d39ebef650173308cfb25e10e833b9c70ffcc4c6b48e3da56e7f8d462b5f66723b13f7660e7e473b990aafe0fa969c51c5aea1fa3ec"}, @NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x27c0}}, 0x0)

5.095335939s ago: executing program 1 (id=1595):
r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0xd377, 0x50000)
getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4)
ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0xff, 0xe8, &(0x7f00000000c0)="1f3dc4a03c916ed28f69480a992f88ca61c5204a96f696018c1f60483caefbd4d16a235162cb991e226ff3e44143bc74a97f3ca691635c216bc4fc94fa8d308f55d6a149c18a1602b0d2c9bd0481154fd03de81251e95d6e8abeeddb47f4a2cb5a4c6f0be8a6e95a33deab72e6d7fb2c4c3fbeb158f900b6d55a76148e17979246c18bcbb70a6956e37624a0e629b4fe2e3e520b6e13df6c3c601d4cc17fa83d69970a633c60dd5d6faae529ee5465e06adb54182a807253129044b8699b207d7b867334e377c8ece07a84c9109fe1cffbbda0242e7884e195810523bd914795a8600f681cb5af02", 0x0, 0x1}]})
ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000240)={0x9, 0x0, <r1=>r0})
ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000280)=0x5)
r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000340)=@ready={0x0, 0x0, 0x8, "2705a51c", {0x1, 0xa2e, 0x9, 0x9, 0x1}})
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0)
ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r1, 0x40044104, 0xfffffffffffffffe)
r3 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x2, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x9, 0x8, 0x8}}}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xe, 0x8, 0x6, 0x8, 0x81}, 0x1c, &(0x7f0000000400)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x2, 0x0, 0xf, 0xf00f, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x80, 0x1, 0x4, 0x5}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x415}}]})
ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000600)={r0, &(0x7f0000000500)='\x00', 0x40283, &(0x7f0000000540)={@_ha_fsid={[0x0, 0x1]}, {0x25, 0x6, 0xbc5, 0x2d}}, 0x6, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)=0x6})
syz_io_uring_setup(0x7fd6, &(0x7f0000000640)={0x0, 0xa5f4, 0x100, 0x1, 0x352, 0x0, r1}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740))
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000780)={<r5=>0xffffffffffffffff})
syz_clone3(&(0x7f0000000a40)={0x0, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=<r6=>0x0, {0x23}, &(0x7f00000008c0), 0x0, &(0x7f0000000900)=""/234, &(0x7f0000000a00)=[0x0], 0x1, {r5}}, 0x58)
timer_create(0x7, &(0x7f0000000ac0)={0x0, 0x1a, 0x2, @tid=r6}, &(0x7f0000000b00))
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r5)
mq_notify(r1, &(0x7f0000000c00)={0x0, 0x21, 0x4, @thr={&(0x7f0000000b40)="10b76f6c25b4b2029a5267d1", &(0x7f0000000b80)="715b5e0b45e508489f56ce0b947379ff26ab564d858756bf22ed825b090c438adb81e310ca2382ab63557e4e1d0c3892586697bb6b758a52419a0523a4086e9063ebcac414c672b1c20a4b56c7f888c219013c1634f43a32ab186d94c86a8c205181fd2e1e861404eb93f715bcb5daf07b1a002508956b09"}})
r7 = syz_open_dev$video4linux(&(0x7f0000000c40), 0x4, 0xa84a71807880ac74)
ioctl$VIDIOC_ENUM_FRAMESIZES(r7, 0xc02c564a, &(0x7f0000000c80)={0x1, 0x0, 0x2, @discrete={0x9, 0xd}})
r8 = getuid()
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@private, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000e40)=0xe8)
mount$overlay(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x800, &(0x7f0000000e80)={[{@volatile}, {@uuid_auto}, {@redirect_dir_nofollow}, {@xino_off}, {@index_off}, {@uuid_auto}, {@index_off}, {@uuid_auto}], [{@dont_hash}, {@smackfshat={'smackfshat', 0x3d, '%^:}*'}}, {@uid_gt={'uid>', r8}}, {@measure}, {@euid_gt={'euid>', r9}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, '/dev/v4l-subdev#\x00'}}]})
pipe(&(0x7f0000000f80)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000001000)={0x4, &(0x7f0000000fc0)=[{0x3, 0xd8, 0x1, 0xba41}, {0xb598, 0x6, 0x2, 0x7}, {0x7fff, 0x0, 0x4, 0x6296}, {0x21, 0x6, 0x2, 0x400}]}, 0x10)
finit_module(r11, &(0x7f0000001040)='[\x00', 0x0)
ioctl$VIDIOC_EXPBUF(r10, 0xc0405610, &(0x7f0000001080)={0x1, 0x2, 0x6, 0x80000})
syz_usb_control_io$printer(r3, &(0x7f00000011c0)={0x14, &(0x7f00000010c0)={0x20, 0x5, 0x9f, {0x9f, 0x4, "54996752cd535056bd9c7b93a4bb77223dfc2752fe1bca9aa0ef8ef7bb59b608134995a570a5096514c0cfe9acd4bb9a9a40d817ab831cb87aef201d2b6e875992545d5f5aabd43826a00055d4bc1fd2e2c46ca4ff6a212abce44d40fda40fe5bd7e8247765216f320a3497907abd184b86e33b0df084003d5ee4022e1edbddea8b24e112d1c7b0405e0e14932d223410111a319961acebfbb5ae9740d"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}}, &(0x7f0000001480)={0x34, &(0x7f0000001200)={0x40, 0xf, 0x6c, "f50d71fe5db249529522689f421b9ef41eb339fce02fbc78cbb13e21dc3439ca2ab4bed36e6d7412902a40c0b4e9a28b401d9d8b5957ff2ab737e20a82d3e774bbe0e0df179d0f11cab6e7d32237b6116b26c71d70737d8693f82d621f2ecc5c385ba478c687b5cfcf15b853"}, &(0x7f0000001280)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001300)={0x20, 0x0, 0xf7, {0xf5, "e34a240a9bd468d4a39d3086b23dce86848b1152c2d8ab53eb411ffccce6983d564470ad911467f5f4bc9d96f82812d1c2b9256120890e85136213874d9f30a19af45f2ea8e8c93916147822544b86895828f427f9483fb3be257d2b74adab46edc976d6e808feedd6aed3afe0a6029bcdb24c163873999ddf62cb6e27f20fee2d248b78a0d65c83924e852cd54411eff45a2b16b462629dbd7d776c6f3558f106a2753336f84efe104d7931e48a91cea91712a665d6ba75b66364ba3493865744fa9cc0eae00b36972f62949b8d5d05a3a3352c7a2d1d41a86c0412f354f417dd1f40ad958d177bbfe819262f49ca5c2a35be5eaf"}}, &(0x7f0000001400)={0x20, 0x1, 0x1, 0x4}, &(0x7f0000001440)={0x20, 0x0, 0x1, 0x6}})
setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f00000014c0)=@req={0x8, 0xf45, 0x70000000, 0x8}, 0x10)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)

5.069837547s ago: executing program 3 (id=1596):
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x18)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
acct(0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@ldst={0x1, 0x3, 0x3, 0x0, 0xa}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0x4, 0xfd}]}, &(0x7f0000000240)='GPL\x00', 0xe}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)

3.582995351s ago: executing program 4 (id=1597):
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x1, 0x48042)
writev(r0, &(0x7f0000000c40)=[{0x0}, {&(0x7f00000005c0)="c21cfb", 0x3}, {&(0x7f00000007c0), 0x300}, {&(0x7f0000000900), 0x4000}], 0xe)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0)
quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000100, 0x0, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0xa2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$proc_mixer(0xffffffffffffffff, 0x0, 0x8c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000800)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000200)={0x10, 0xd7, 0x5, 0x7f, 0x9, 0xf9, 0x80, 0x8, 0x6, 0xd3, 0x8, 0x1, 0x1, 0x3}, 0xe)
socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4098884, &(0x7f0000000380)={0xa, 0x4e20, 0xc, @mcast2}, 0x1c)

3.256491787s ago: executing program 3 (id=1598):
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
fanotify_init(0x1, 0x101000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
close(0xffffffffffffffff)
r1 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c6d73697a653d30390ff9d08e2f677a5968603b094bd227783030"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000060000000100", @ANYRES32, @ANYBLOB, @ANYRES32], 0x50)
unshare(0x20000600)
r3 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r3, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f0000000380)=""/243, 0xf3}], 0x2, 0x2, 0x3f2f07da)

3.210641723s ago: executing program 0 (id=1599):
r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0xa, @pix={0x7f, 0xbc, 0x3032344d, 0x5, 0x100, 0x7, 0x5, 0x100, 0x0, 0x8, 0x0, 0x3}}) (fail_nth: 3)

2.484950905s ago: executing program 4 (id=1600):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xfffffffffffffffc, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x54485746, 0x0, @stepwise={0x0, 0x400, 0x0, 0x0, 0xfffffffc}}) (fail_nth: 3)

2.020632851s ago: executing program 0 (id=1601):
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$afs(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f00000004c0)={[{@flock_write}]}) (async)
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000800)=0x5f5e0f7, 0x4) (async)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000640)={0x0, 0x1, 0x6, 0x0, 0xffffffff}, 0xc)

1.975793153s ago: executing program 3 (id=1602):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
socket$kcm(0x10, 0x2, 0x4)
r2 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_SF_ORD={0x5}]}, 0x44}}, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x4040)
socket$igmp(0x2, 0x3, 0x2)
close(r1)
setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a000100000002002000000080000000", @ANYRES32=0x0, @ANYRESHEX=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080)=0x20)

1.610035655s ago: executing program 2 (id=1603):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x4b26e94}, @in={0x2, 0x4e20, @multicast2}], 0x2c)
setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x5e)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$getown(r1, 0x9)
setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e23, @multicast2}}}, 0x88)
close(r7)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x1}}, 0x10)

1.540584756s ago: executing program 4 (id=1604):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r0, 0x90004)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16)
ppoll(&(0x7f0000000280)=[{r0, 0x6068}], 0x1, 0x0, 0x0, 0x0)
getpid()
r1 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x294, 0x2, 0x80000003, 0x6, 0x2b, 0x2006, 0xf4, 0x8, 0x80ffa, 0x2, 0x7, 0x8504, 0x1003, 0x8, 0xf, 0x9, 0x63, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x0, 0x8, 0x3ff, 0x10, 0x4, 0x5, 0x8, 0x0, 0x2, 0x5ffd, 0xfffffff9]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
creat(&(0x7f0000001380)='./file0\x00', 0x4)
epoll_create1(0x80000)
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='exfat\x00', 0x0, 0x0)

1.42116276s ago: executing program 0 (id=1605):
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002)
capset(0x0, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b18, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x1)

1.270788363s ago: executing program 3 (id=1606):
syz_open_dev$tty20(0xc, 0x4, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010080, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
fanotify_init(0x1, 0x101000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
close(0xffffffffffffffff)
r0 = socket$tipc(0x1e, 0x5, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6d73697a653d30390ff9d08e2f677a5968603b094bd227783030"])
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x1})
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000060000000100", @ANYRES32, @ANYBLOB, @ANYRES32], 0x50)
unshare(0x20000600)
r2 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
preadv(r2, &(0x7f0000000480)=[{&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f0000000380)=""/243, 0xf3}], 0x2, 0x2, 0x3f2f07da)

0s ago: executing program 2 (id=1607):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002380), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f00000023c0)={0x18, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21106}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7000fddbdf2504000000080003000300000008", @ANYRES32=0x0, @ANYBLOB="1400edfe667c1235f9d7134a0004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000090)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, 0x0)
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000380)={0x28, 0x7, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000})
ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000034c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x274c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2724, 0x4, 0x0, 0x1, [{0x460, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x450, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x400}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_EXPRESSIONS={0x418, 0xa, 0x0, 0x1, [{0x368, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x354, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x350, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3e, 0x1, "8ea6c996b2b1471e3e8aa983a64a80fcffcdf179fab6ba92fcab78473f5f2e6caa1c262378669c1f42b3cb60f0f9d79d420cfa68e1cb1f4bb32b"}, @NFTA_DATA_VALUE={0x7d, 0x1, "1246347b49e924b5d3278fe3d2947afbda4f2f81f77408cdedfa03f48e77f30c3a3f64744e3b7e23301a61875ba3f840b855e082788ceaf6b4dfb8bfb4166ab88f7eb692dd5d0e7c293ac1c458c045e95cfb617bbf076c4a7b60d8f13ebc20185db09b93cd716fd9f7d162dda8591d09de4fe60433a28c5944"}, @NFTA_DATA_VALUE={0x14e, 0x1, "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"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}}}, {0x40, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}]}}}, {0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0x22c0, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x22b0, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x2294, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "ef0934f1fef31333cb8f929a5a35f55d2371bdd46a91867280895beb05549ec9f5260c584caa245afbfe7f458f0e61a144779eb8e0c7ddcfbdce8a6fea5514a621ed108f7def0a0dfea1fe296d4954887008338fa2efd2592c0e6ec1a9001641e0eefaeb83e207acd053d6090f004f688f1725b7f981317c5907a555f64333443f45ddf4181a8cf304e52ed85bda284e87a3016cbdd40f9d372c8bb21a8b8429fbe914d7c5a27b39abd640e2e4fd2857bd52898c317404d66aa210578d6c03c8e55c6df79924cb570f0f564af75008b960835550db90dc45cee4b1a79cb629105dbdeeae2dc811ac5f641a22e5311da218358dc8ae303e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "c9ffa004533c9a76546de119960deb364bb846e31f9f247a3c8e72d5fb153438451e91877a461b2433051104ec5aafa499ea8ae7ed6e6267081a35df25cfe113228a27e892dd57b580a77d43c8c4a4f387437d045a63eccb5b11566289ea1999d564fbea4f504cff8c442dbbee30baed89828590b9b827fb67c0294559c3e4d92949ffb5d6ed072829ac45175b061428aeb1c9dd0e49929d39ebef650173308cfb25e10e833b9c70ffcc4c6b48e3da56e7f8d462b5f66723b13f7660e7e473b990aafe0fa969c51c5aea1fa3ec"}, @NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x27c0}}, 0x0)

kernel console output (not intermixed with test programs):

26 audit(1779637151.447:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8620 comm="syz.2.865" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  521.133494][ T5735] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  521.484161][ T5735] usb 4-1: Using ep0 maxpacket: 32
[  521.487478][ T5735] usb 4-1: config 5 has an invalid interface number: 238 but max is 0
[  521.487499][ T5735] usb 4-1: config 5 has no interface number 0
[  521.487529][ T5735] usb 4-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  521.487548][ T5735] usb 4-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  521.487573][ T5735] usb 4-1: config 5 interface 238 has no altsetting 0
[  521.489777][ T5735] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  521.489798][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.489814][ T5735] usb 4-1: Product: syz
[  521.489824][ T5735] usb 4-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  521.489849][ T5735] usb 4-1: SerialNumber: syz
[  521.636950][ T8643] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  522.266947][ T8643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.283371][ T8643] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  524.125539][ T5735] usb 4-1: unsupported MDLM descriptors
[  524.168617][ T5735] usb 4-1: USB disconnect, device number 7
[  525.928814][ T8669] netlink: 'syz.2.880': attribute type 2 has an invalid length.
[  526.102092][ T8673] netlink: 104 bytes leftover after parsing attributes in process `syz.4.878'.
[  528.000848][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.886'.
[  533.561260][ T8719] sctp: [Deprecated]: syz.1.894 (pid 8719) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.561260][ T8719] Use struct sctp_sack_info instead
[  537.324079][ T5733] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  537.478085][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  537.478120][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  537.478159][ T5733] usb 2-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  537.478183][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.533499][ T5733] usb 2-1: config 0 descriptor??
[  538.348592][ T8749] netlink: 104 bytes leftover after parsing attributes in process `syz.3.898'.
[  538.913541][ T5733] hid_parser_main: 456 callbacks suppressed
[  538.913569][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913600][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913627][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913654][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913681][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913707][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913734][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913760][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913787][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.913813][ T5733] wacom 0003:056A:5012.000A: unknown main item tag 0x0
[  538.921351][ T5733] wacom 0003:056A:5012.000A: reserved main item tag 0xd
[  539.111901][ T5713] usb 2-1: USB disconnect, device number 15
[  539.454514][ T8753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'.
[  539.454563][ T8753] netlink: 24 bytes leftover after parsing attributes in process `syz.4.905'.
[  548.480442][ T8810] sctp: [Deprecated]: syz.4.922 (pid 8810) Use of struct sctp_assoc_value in delayed_ack socket option.
[  548.480442][ T8810] Use struct sctp_sack_info instead
[  552.520975][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.928'.
[  555.928207][ T8856] netlink: 20 bytes leftover after parsing attributes in process `syz.2.936'.
[  556.698472][ T8867] 9p: Bad value for 'msize'
[  558.093007][ T8877] 9p: Bad value for 'msize'
[  559.985805][ T8886] sctp: [Deprecated]: syz.3.945 (pid 8886) Use of struct sctp_assoc_value in delayed_ack socket option.
[  559.985805][ T8886] Use struct sctp_sack_info instead
[  563.186422][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  563.186523][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  567.078792][ T8936] 9p: Bad value for 'msize'
[  568.403992][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'.
[  570.059892][ T8964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'.
[  574.140367][ T8978] 9p: Bad value for 'msize'
[  576.934501][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'.
[  580.338038][ T9018] sctp: [Deprecated]: syz.1.987 (pid 9018) Use of struct sctp_assoc_value in delayed_ack socket option.
[  580.338038][ T9018] Use struct sctp_sack_info instead
[  580.769338][   T36] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  581.120992][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  581.121116][   T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  581.121562][   T36] usb 1-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  581.121721][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.244817][   T36] usb 1-1: config 0 descriptor??
[  581.741353][ T9027] 9p: Bad value for 'msize'
[  582.776839][   T36] hid_parser_main: 459 callbacks suppressed
[  582.776866][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777666][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777733][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777794][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777814][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777832][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777851][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777869][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777887][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.777905][   T36] wacom 0003:056A:5012.000B: unknown main item tag 0x0
[  582.866430][   T36] wacom 0003:056A:5012.000B: reserved main item tag 0xd
[  583.024055][ T5733] usb 1-1: USB disconnect, device number 11
[  583.215457][ T9045] 9p: Bad value for 'msize'
[  584.208384][ T9051] 9p: Bad value for 'msize'
[  585.560697][ T9061] sctp: [Deprecated]: syz.4.997 (pid 9061) Use of struct sctp_assoc_value in delayed_ack socket option.
[  585.560697][ T9061] Use struct sctp_sack_info instead
[  585.624774][ T9062] fuse: Bad value for 'group_id'
[  585.624796][ T9062] fuse: Bad value for 'group_id'
[  587.298468][ T9077] 9p: Bad value for 'msize'
[  587.753466][ T9080] 9p: Bad value for 'msize'
[  590.397049][   T37] audit: type=1326 audit(1779637222.927:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9097 comm="syz.0.1009" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  590.501436][   T37] audit: type=1326 audit(1779637223.027:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9097 comm="syz.0.1009" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  590.541721][   T37] audit: type=1326 audit(1779637223.067:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9097 comm="syz.0.1009" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  591.589676][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1013'.
[  593.568019][ T9121] fuse: Bad value for 'group_id'
[  593.568036][ T9121] fuse: Bad value for 'group_id'
[  593.810087][ T9124] 9p: Bad value for 'msize'
[  594.503119][ T9129] fuse: Bad value for 'fd'
[  594.991591][ T9133] 9p: Bad value for 'msize'
[  598.871906][ T9163] 9p: Bad value for 'msize'
[  599.570196][ T9167] fuse: Bad value for 'group_id'
[  599.570217][ T9167] fuse: Bad value for 'group_id'
[  604.454081][   T36] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  604.604071][   T36] usb 2-1: Using ep0 maxpacket: 32
[  604.613617][   T36] usb 2-1: config 5 has an invalid interface number: 238 but max is 0
[  604.613668][   T36] usb 2-1: config 5 has no interface number 0
[  604.613722][   T36] usb 2-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  604.613739][   T36] usb 2-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  604.613756][   T36] usb 2-1: config 5 interface 238 has no altsetting 0
[  604.680252][   T36] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  604.680285][   T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.680306][   T36] usb 2-1: Product: syz
[  604.680321][   T36] usb 2-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  604.680354][   T36] usb 2-1: SerialNumber: syz
[  604.775060][ T9188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  605.009730][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  605.028168][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.412245][   T36] usb 2-1: unsupported MDLM descriptors
[  606.468253][   T36] usb 2-1: USB disconnect, device number 16
[  606.684044][  T821] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  606.843944][  T821] usb 1-1: Using ep0 maxpacket: 32
[  606.942399][  T821] usb 1-1: config 5 has an invalid interface number: 238 but max is 0
[  606.942431][  T821] usb 1-1: config 5 has no interface number 0
[  606.942487][  T821] usb 1-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  606.942514][  T821] usb 1-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  606.942544][  T821] usb 1-1: config 5 interface 238 has no altsetting 0
[  606.966013][ T5733] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  607.040865][  T821] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  607.040903][  T821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.040938][  T821] usb 1-1: Product: syz
[  607.040953][  T821] usb 1-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  607.040985][  T821] usb 1-1: SerialNumber: syz
[  607.981885][ T9207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  608.050985][ T5733] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  608.051050][ T5733] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  608.051078][ T5733] usb 5-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  608.051095][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  608.178156][ T5733] usb 5-1: config 0 descriptor??
[  608.273675][ T9207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.325776][ T9207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.354776][  T821] usb 1-1: unsupported MDLM descriptors
[  610.395623][  T821] usb 1-1: USB disconnect, device number 12
[  611.431359][   T36] usb 5-1: USB disconnect, device number 13
[  613.098975][  T821] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  613.274205][  T821] usb 4-1: Using ep0 maxpacket: 32
[  613.284068][  T821] usb 4-1: config 5 has an invalid interface number: 238 but max is 0
[  613.284101][  T821] usb 4-1: config 5 has no interface number 0
[  613.284151][  T821] usb 4-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  613.284176][  T821] usb 4-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  613.284206][  T821] usb 4-1: config 5 interface 238 has no altsetting 0
[  613.355885][  T821] usb 4-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  613.355919][  T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  613.355996][  T821] usb 4-1: Product: syz
[  613.356020][  T821] usb 4-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  613.356058][  T821] usb 4-1: SerialNumber: syz
[  613.508545][ T9251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  614.121249][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.142809][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.699420][  T821] usb 4-1: unsupported MDLM descriptors
[  614.746838][  T821] usb 4-1: USB disconnect, device number 8
[  616.696245][ T5713] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  616.855110][ T5713] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  616.855139][ T5713] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  616.855179][ T5713] usb 5-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  616.855204][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  617.125204][ T5713] usb 5-1: config 0 descriptor??
[  617.597313][   T37] audit: type=1326 audit(1779637250.097:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597374][   T37] audit: type=1326 audit(1779637250.097:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597426][   T37] audit: type=1326 audit(1779637250.097:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597522][   T37] audit: type=1326 audit(1779637250.097:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597570][   T37] audit: type=1326 audit(1779637250.107:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597795][   T37] audit: type=1326 audit(1779637250.107:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597861][   T37] audit: type=1326 audit(1779637250.107:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597912][   T37] audit: type=1326 audit(1779637250.107:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.597961][   T37] audit: type=1326 audit(1779637250.107:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  617.598009][   T37] audit: type=1326 audit(1779637250.117:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9285 comm="syz.2.1068" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7ffc0000
[  618.062158][ T9286] capability: warning: `syz.2.1068' uses deprecated v2 capabilities in a way that may be insecure
[  619.493774][ T5700] usb 5-1: USB disconnect, device number 14
[  619.724103][ T5713] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  619.830552][ T9305] FAULT_INJECTION: forcing a failure.
[  619.830552][ T9305] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  619.830606][ T9305] CPU: 1 UID: 0 PID: 9305 Comm: syz.4.1074 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  619.830632][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  619.830653][ T9305] Call Trace:
[  619.830661][ T9305]  <TASK>
[  619.830671][ T9305]  dump_stack_lvl+0xe8/0x150
[  619.830705][ T9305]  should_fail_ex+0x46b/0x600
[  619.830732][ T9305]  _copy_to_user+0x31/0xb0
[  619.830762][ T9305]  simple_read_from_buffer+0xe1/0x170
[  619.830802][ T9305]  proc_fail_nth_read+0x1be/0x230
[  619.830828][ T9305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  619.830854][ T9305]  ? rw_verify_area+0x2ac/0x4e0
[  619.830879][ T9305]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  619.830904][ T9305]  vfs_read+0x212/0xa80
[  619.830937][ T9305]  ? __pfx_vfs_read+0x10/0x10
[  619.830965][ T9305]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  619.831117][ T9305]  ? lockdep_hardirqs_on+0x7a/0x110
[  619.831170][ T9305]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  619.831202][ T9305]  ? mutex_lock_nested+0x152/0x1d0
[  619.831225][ T9305]  ? fdget_pos+0x252/0x320
[  619.831254][ T9305]  ksys_read+0x156/0x270
[  619.831282][ T9305]  ? __pfx_ksys_read+0x10/0x10
[  619.831306][ T9305]  ? __pfx_evdev_ioctl+0x10/0x10
[  619.831373][ T9305]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.831398][ T9305]  do_syscall_64+0x15f/0xf80
[  619.831453][ T9305]  ? trace_irq_disable+0x3b/0x140
[  619.831479][ T9305]  ? clear_bhb_loop+0x40/0x90
[  619.831507][ T9305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.831535][ T9305] RIP: 0033:0x7f339120d68e
[  619.831567][ T9305] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  619.831586][ T9305] RSP: 002b:00007f338f4a5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  619.831618][ T9305] RAX: ffffffffffffffda RBX: 00007f338f4a66c0 RCX: 00007f339120d68e
[  619.831635][ T9305] RDX: 000000000000000f RSI: 00007f338f4a60a0 RDI: 0000000000000004
[  619.831650][ T9305] RBP: 00007f338f4a6090 R08: 0000000000000000 R09: 0000000000000000
[  619.831664][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  619.831677][ T9305] R13: 00007f33914c6038 R14: 00007f33914c5fa0 R15: 00007ffde3e79118
[  619.831713][ T9305]  </TASK>
[  619.893989][ T5713] usb 2-1: Using ep0 maxpacket: 32
[  620.084690][ T5713] usb 2-1: config 5 has an invalid interface number: 238 but max is 0
[  620.084722][ T5713] usb 2-1: config 5 has no interface number 0
[  620.084768][ T5713] usb 2-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  620.084794][ T5713] usb 2-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  620.084824][ T5713] usb 2-1: config 5 interface 238 has no altsetting 0
[  620.088271][ T5713] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  620.088510][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  620.088534][ T5713] usb 2-1: Product: syz
[  620.088549][ T5713] usb 2-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  620.088580][ T5713] usb 2-1: SerialNumber: syz
[  620.270635][ T9301] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  620.488120][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  620.488771][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.329369][ T5713] usb 2-1: unsupported MDLM descriptors
[  621.369144][ T5713] usb 2-1: USB disconnect, device number 17
[  622.144908][ T5735] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  622.306613][ T5735] usb 5-1: config 0 has an invalid descriptor of length 161, skipping remainder of the config
[  622.306669][ T5735] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  622.306712][ T5735] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  622.306737][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.409024][ T5735] usb 5-1: config 0 descriptor??
[  623.499714][ T5735] ath6kl: Failed to submit usb control message: -71
[  623.499766][ T5735] ath6kl: unable to send the bmi data to the device: -71
[  623.499783][ T5735] ath6kl: Unable to send get target info: -71
[  623.571495][ T5735] ath6kl: Failed to init ath6kl core: -71
[  623.572154][ T5735] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  623.628297][ T5735] usb 5-1: USB disconnect, device number 15
[  624.177581][ T9345] FAULT_INJECTION: forcing a failure.
[  624.177581][ T9345] name failslab, interval 1, probability 0, space 0, times 1
[  624.177611][ T9345] CPU: 1 UID: 0 PID: 9345 Comm: syz.3.1090 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  624.177631][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  624.177642][ T9345] Call Trace:
[  624.177648][ T9345]  <TASK>
[  624.177656][ T9345]  dump_stack_lvl+0xe8/0x150
[  624.177681][ T9345]  should_fail_ex+0x46b/0x600
[  624.177704][ T9345]  should_failslab+0xa8/0x100
[  624.177727][ T9345]  __kmalloc_noprof+0xdf/0x7b0
[  624.177747][ T9345]  ? video_usercopy+0x1b1/0x1450
[  624.177851][ T9345]  video_usercopy+0x1b1/0x1450
[  624.177880][ T9345]  ? smk_tskacc+0x311/0x3a0
[  624.177899][ T9345]  ? __pfx___video_do_ioctl+0x10/0x10
[  624.177927][ T9345]  ? __pfx_video_usercopy+0x10/0x10
[  624.177952][ T9345]  ? smack_file_ioctl+0x2c2/0x360
[  624.177987][ T9345]  ? __fget_files+0x2a/0x420
[  624.178012][ T9345]  ? __fget_files+0x3a6/0x420
[  624.178032][ T9345]  v4l2_ioctl+0x190/0x1e0
[  624.178059][ T9345]  ? __pfx_v4l2_ioctl+0x10/0x10
[  624.178085][ T9345]  __se_sys_ioctl+0xff/0x170
[  624.178107][ T9345]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.178126][ T9345]  do_syscall_64+0x15f/0xf80
[  624.178151][ T9345]  ? trace_irq_disable+0x3b/0x140
[  624.178172][ T9345]  ? clear_bhb_loop+0x40/0x90
[  624.178194][ T9345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.178212][ T9345] RIP: 0033:0x7fde2327ce59
[  624.178228][ T9345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  624.178243][ T9345] RSP: 002b:00007fde214d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  624.178264][ T9345] RAX: ffffffffffffffda RBX: 00007fde234f5fa0 RCX: 00007fde2327ce59
[  624.178278][ T9345] RDX: 0000200000000240 RSI: 00000000c0cc5616 RDI: 0000000000000003
[  624.178289][ T9345] RBP: 00007fde214d6090 R08: 0000000000000000 R09: 0000000000000000
[  624.178300][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.178311][ T9345] R13: 00007fde234f6038 R14: 00007fde234f5fa0 R15: 00007fff40297e08
[  624.178338][ T9345]  </TASK>
[  624.352285][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[  624.360918][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  624.947021][ T5713] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  625.098997][ T5713] usb 2-1: Using ep0 maxpacket: 32
[  625.125790][ T5713] usb 2-1: config 5 has an invalid interface number: 238 but max is 0
[  625.125821][ T5713] usb 2-1: config 5 has no interface number 0
[  625.128892][ T5713] usb 2-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  625.129010][ T5713] usb 2-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  625.129109][ T5713] usb 2-1: config 5 interface 238 has no altsetting 0
[  625.673087][ T5713] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  625.673121][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  625.673152][ T5713] usb 2-1: Product: syz
[  625.673167][ T5713] usb 2-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  625.673219][ T5713] usb 2-1: SerialNumber: syz
[  625.747822][ T9350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  625.978912][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  625.979465][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.622328][ T5713] usb 2-1: unsupported MDLM descriptors
[  626.819263][ T5713] usb 2-1: USB disconnect, device number 18
[  632.077114][ T9402] : entered promiscuous mode
[  633.220895][ T9416] fuse: Unknown parameter '00000000000000000000'
[  633.235922][   T36] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  633.384432][   T36] usb 1-1: Using ep0 maxpacket: 32
[  633.391375][   T36] usb 1-1: config 5 has an invalid interface number: 238 but max is 0
[  633.391411][   T36] usb 1-1: config 5 has no interface number 0
[  633.391461][   T36] usb 1-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  633.391489][   T36] usb 1-1: config 5 interface 238 has no altsetting 0
[  633.439986][   T36] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  633.440020][   T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  633.440042][   T36] usb 1-1: Product: syz
[  633.440058][   T36] usb 1-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  633.440093][   T36] usb 1-1: SerialNumber: syz
[  633.761713][ T9412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.762365][ T9412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.665655][   T36] usb 1-1: unsupported MDLM descriptors
[  636.722037][   T36] usb 1-1: USB disconnect, device number 13
[  637.559264][   T36] usb 1-1: new full-speed USB device number 14 using dummy_hcd
[  637.796817][   T36] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  637.796902][   T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  637.815567][   T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  637.815615][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  637.815704][   T36] usb 1-1: SerialNumber: syz
[  638.425897][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1124'.
[  641.912730][   T36] usb 1-1: 0:2 : does not exist
[  642.354778][   T37] kauditd_printk_skb: 83 callbacks suppressed
[  642.354806][   T37] audit: type=1326 audit(1779637274.877:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9452 comm="syz.4.1125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  644.419906][   T36] usb 1-1: USB disconnect, device number 14
[  644.849802][ T9479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1131'.
[  644.849856][ T9479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1131'.
[  650.084375][ T9508] process 'syz.0.1138' launched './file1' with NULL argv: empty string added
[  650.212205][ T9510] FAULT_INJECTION: forcing a failure.
[  650.212205][ T9510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  650.212241][ T9510] CPU: 0 UID: 0 PID: 9510 Comm: syz.3.1139 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  650.212261][ T9510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  650.212273][ T9510] Call Trace:
[  650.212279][ T9510]  <TASK>
[  650.212287][ T9510]  dump_stack_lvl+0xe8/0x150
[  650.212313][ T9510]  should_fail_ex+0x46b/0x600
[  650.212337][ T9510]  _copy_from_user+0x2d/0xb0
[  650.212362][ T9510]  bpf_test_init+0xd8/0x150
[  650.212490][ T9510]  bpf_prog_test_run_skb+0x392/0x2260
[  650.212512][ T9510]  ? bpf_prog_test_run_skb+0x271/0x2260
[  650.212550][ T9510]  ? __fget_files+0x3a6/0x420
[  650.212566][ T9510]  ? __fget_files+0x2a/0x420
[  650.212585][ T9510]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  650.212609][ T9510]  bpf_prog_test_run+0x2cd/0x340
[  650.212635][ T9510]  __sys_bpf+0x643/0x950
[  650.212657][ T9510]  ? __pfx___sys_bpf+0x10/0x10
[  650.212675][ T9510]  ? rt_mutex_slowunlock+0x1cb/0x300
[  650.212747][ T9510]  ? ksys_write+0x248/0x270
[  650.212777][ T9510]  ? __pfx_ksys_write+0x10/0x10
[  650.212808][ T9510]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.212835][ T9510]  __x64_sys_bpf+0x7c/0x90
[  650.212860][ T9510]  do_syscall_64+0x15f/0xf80
[  650.212895][ T9510]  ? trace_irq_disable+0x3b/0x140
[  650.212925][ T9510]  ? clear_bhb_loop+0x40/0x90
[  650.212947][ T9510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.212964][ T9510] RIP: 0033:0x7fde2327ce59
[  650.212981][ T9510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  650.212996][ T9510] RSP: 002b:00007fde214d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  650.213014][ T9510] RAX: ffffffffffffffda RBX: 00007fde234f5fa0 RCX: 00007fde2327ce59
[  650.213026][ T9510] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a
[  650.213038][ T9510] RBP: 00007fde214d6090 R08: 0000000000000000 R09: 0000000000000000
[  650.213048][ T9510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.213058][ T9510] R13: 00007fde234f6038 R14: 00007fde234f5fa0 R15: 00007fff40297e08
[  650.213084][ T9510]  </TASK>
[  650.577161][   T37] audit: type=1326 audit(1779637283.107:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9513 comm="syz.1.1140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  651.048981][   T37] audit: type=1326 audit(1779637283.577:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9513 comm="syz.1.1140" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  652.920745][ T9531] binder: 9519:9531 ioctl c0306201 200000000180 returned -14
[  653.299149][ T9536] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1146'.
[  656.480780][ T9561] FAULT_INJECTION: forcing a failure.
[  656.480780][ T9561] name failslab, interval 1, probability 0, space 0, times 0
[  656.480818][ T9561] CPU: 1 UID: 0 PID: 9561 Comm: syz.1.1153 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  656.480844][ T9561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  656.480859][ T9561] Call Trace:
[  656.480867][ T9561]  <TASK>
[  656.480877][ T9561]  dump_stack_lvl+0xe8/0x150
[  656.480910][ T9561]  should_fail_ex+0x46b/0x600
[  656.480939][ T9561]  should_failslab+0xa8/0x100
[  656.480972][ T9561]  kmem_cache_alloc_noprof+0x87/0x680
[  656.480997][ T9561]  ? alloc_empty_file+0x5b/0x1d0
[  656.481036][ T9561]  alloc_empty_file+0x5b/0x1d0
[  656.481069][ T9561]  path_openat+0x11b/0x38a0
[  656.481103][ T9561]  ? try_to_take_rt_mutex+0x840/0xb00
[  656.481131][ T9561]  ? arch_stack_walk+0xfb/0x150
[  656.481173][ T9561]  ? __lock_acquire+0x6b5/0x2cf0
[  656.481209][ T9561]  ? __pfx_path_openat+0x10/0x10
[  656.481239][ T9561]  ? kasan_save_track+0x4f/0x80
[  656.481260][ T9561]  ? kasan_save_track+0x3e/0x80
[  656.481280][ T9561]  ? __kasan_slab_alloc+0x6c/0x80
[  656.481302][ T9561]  ? kmem_cache_alloc_noprof+0x33b/0x680
[  656.481334][ T9561]  ? do_raw_spin_lock+0x12b/0x2f0
[  656.481370][ T9561]  do_file_open+0x23e/0x4a0
[  656.481396][ T9561]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  656.481432][ T9561]  ? __pfx_do_file_open+0x10/0x10
[  656.481454][ T9561]  ? rt_mutex_slowunlock+0x4a7/0x8b0
[  656.481504][ T9561]  ? alloc_fd+0x64e/0x6c0
[  656.481549][ T9561]  do_sys_openat2+0x113/0x200
[  656.481588][ T9561]  ? __pfx_do_sys_openat2+0x10/0x10
[  656.481630][ T9561]  ? ksys_write+0x248/0x270
[  656.481658][ T9561]  ? __pfx_ksys_write+0x10/0x10
[  656.481686][ T9561]  __x64_sys_openat+0x138/0x170
[  656.481722][ T9561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.481746][ T9561]  do_syscall_64+0x15f/0xf80
[  656.481776][ T9561]  ? trace_irq_disable+0x3b/0x140
[  656.481804][ T9561]  ? clear_bhb_loop+0x40/0x90
[  656.481833][ T9561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  656.481856][ T9561] RIP: 0033:0x7f50c437ce59
[  656.481877][ T9561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  656.481898][ T9561] RSP: 002b:00007f50c25b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  656.481923][ T9561] RAX: ffffffffffffffda RBX: 00007f50c45f6090 RCX: 00007f50c437ce59
[  656.481940][ T9561] RDX: 00000000000c8a02 RSI: 0000200000000180 RDI: ffffffffffffff9c
[  656.481956][ T9561] RBP: 00007f50c25b5090 R08: 0000000000000000 R09: 0000000000000000
[  656.481971][ T9561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  656.481984][ T9561] R13: 00007f50c45f6128 R14: 00007f50c45f6090 R15: 00007ffc587c07e8
[  656.482020][ T9561]  </TASK>
[  659.419782][   T37] audit: type=1326 audit(1779637291.947:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9571 comm="syz.4.1157" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  659.534047][ T6336] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  659.897326][ T9589] comedi comedi3: fl512: I/O base address not correctly aligned
[  660.771940][ T6336] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  660.771982][ T6336] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  660.772032][ T6336] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  660.772058][ T6336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  660.860119][ T6336] usb 1-1: config 0 descriptor??
[  660.860982][ T9581] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  660.884122][ T5733] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  661.050357][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.050402][ T5733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.050448][ T5733] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  661.050482][ T5733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.153788][ T5733] usb 4-1: config 0 descriptor??
[  661.215343][ T6336] ath6kl: Failed to submit usb control message: -71
[  661.215399][ T6336] ath6kl: unable to send the bmi data to the device: -71
[  661.215415][ T6336] ath6kl: Unable to send get target info: -71
[  661.248627][ T6336] ath6kl: Failed to init ath6kl core: -71
[  661.339299][ T6336] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  661.373919][ T6336] usb 1-1: USB disconnect, device number 15
[  661.874220][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.874914][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  661.876996][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  661.877728][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.000223][ T5733] usbhid 4-1:0.0: can't add hid device: -71
[  662.000386][ T5733] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  662.052552][ T5733] usb 4-1: USB disconnect, device number 9
[  664.113401][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1169'.
[  665.191039][   T37] audit: type=1326 audit(1779637297.717:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.1174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  665.560452][   T37] audit: type=1326 audit(1779637298.087:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.1174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  665.602984][   T37] audit: type=1326 audit(1779637298.127:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9624 comm="syz.4.1174" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  665.975968][ T9640] netlink: 'syz.1.1178': attribute type 3 has an invalid length.
[  665.975995][ T9640] netlink: 'syz.1.1178': attribute type 3 has an invalid length.
[  666.858775][ T9649] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1181'.
[  668.823999][ T5713] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  669.014014][ T5713] usb 5-1: Using ep0 maxpacket: 32
[  669.033502][ T5713] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  669.033524][ T5713] usb 5-1: config 0 has no interface number 0
[  669.033556][ T5713] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  669.033576][ T5713] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  669.151975][ T5713] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad
[  669.152008][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  669.152029][ T5713] usb 5-1: Product: syz
[  669.152043][ T5713] usb 5-1: Manufacturer: syz
[  669.152058][ T5713] usb 5-1: SerialNumber: syz
[  669.196658][ T5713] usb 5-1: config 0 descriptor??
[  670.065925][ T5713] radio-si470x 5-1:0.35: si470x_get_report: usb_control_msg returned -110
[  670.066182][ T5713] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -5
[  670.097412][ T5713] radio-raremono 5-1:0.35: this is not Thanko's Raremono.
[  671.004652][ T9677] input: syz1 as /devices/virtual/input/input5
[  671.030592][   T37] audit: type=1326 audit(1779637303.557:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  671.203684][   T37] audit: type=1326 audit(1779637303.727:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  671.252933][   T37] audit: type=1326 audit(1779637303.777:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9680 comm="syz.3.1190" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  671.482876][ T9677] Trying to write to read-only block-device nullb0
[  673.257412][   T36] usb 5-1: USB disconnect, device number 16
[  676.024917][ T9707] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1195'.
[  676.549567][ T9709] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1198'.
[  676.745807][ T9716] netlink: 'syz.0.1200': attribute type 2 has an invalid length.
[  678.013270][   T37] audit: type=1326 audit(1779637310.537:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9725 comm="syz.0.1203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  678.122366][   T37] audit: type=1326 audit(1779637310.647:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9725 comm="syz.0.1203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  678.174164][   T37] audit: type=1326 audit(1779637310.697:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9725 comm="syz.0.1203" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  679.075431][ T9740] syz.1.1208 (9740): drop_caches: 0
[  681.616936][ T9759] netlink: 'syz.3.1213': attribute type 27 has an invalid length.
[  681.616965][ T9759] netlink: 'syz.3.1213': attribute type 4 has an invalid length.
[  681.616979][ T9759] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1213'.
[  682.083013][ T9762] ceph: No mds server is up or the cluster is laggy
[  682.470882][ T5735] libceph: connect (1)[c::]:6789 error -101
[  682.510390][ T5735] libceph: mon0 (1)[c::]:6789 connect error
[  685.774871][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  689.995675][ T9817] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1231'.
[  693.315373][ T5714] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  693.474099][ T5714] usb 1-1: Using ep0 maxpacket: 32
[  693.478426][ T5714] usb 1-1: config 5 has an invalid interface number: 238 but max is 0
[  693.478455][ T5714] usb 1-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  693.478473][ T5714] usb 1-1: config 5 has no interface number 0
[  693.478509][ T5714] usb 1-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  693.478532][ T5714] usb 1-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  693.478556][ T5714] usb 1-1: config 5 interface 238 has no altsetting 0
[  693.481376][ T5714] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  693.481408][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.481427][ T5714] usb 1-1: Product: syz
[  693.481440][ T5714] usb 1-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  693.481472][ T5714] usb 1-1: SerialNumber: syz
[  694.692934][ T9823] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  694.770836][ T9820] loop5: detected capacity change from 0 to 7
[  695.098920][ T9823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.100218][ T9823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  695.861604][ T5714] usb 1-1: unsupported MDLM descriptors
[  695.926170][ T5714] usb 1-1: USB disconnect, device number 16
[  696.320071][ T9820] Dev loop5: unable to read RDB block 7
[  696.320130][ T9820]  loop5: unable to read partition table
[  696.320375][ T9820] loop5: partition table beyond EOD, truncated
[  696.320417][ T9820] loop_reread_partitions: partition scan of loop5 (�被x������ ) failed (rc=-5)
[  698.085570][   T37] audit: type=1326 audit(1779637330.617:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9853 comm="syz.1.1243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  698.135236][   T37] audit: type=1326 audit(1779637330.667:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9853 comm="syz.1.1243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  698.188626][   T37] audit: type=1326 audit(1779637330.717:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9853 comm="syz.1.1243" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  699.297806][   T37] audit: type=1326 audit(1779637331.817:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  699.297871][   T37] audit: type=1326 audit(1779637331.817:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  699.297919][   T37] audit: type=1326 audit(1779637331.817:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  699.297969][   T37] audit: type=1326 audit(1779637331.817:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  699.298015][   T37] audit: type=1326 audit(1779637331.817:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  699.298064][   T37] audit: type=1326 audit(1779637331.817:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  699.298113][   T37] audit: type=1326 audit(1779637331.817:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9865 comm="syz.4.1248" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7ffc0000
[  703.436478][   T37] kauditd_printk_skb: 19 callbacks suppressed
[  703.436500][   T37] audit: type=1326 audit(1779637335.957:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.2.1259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  703.512200][   T37] audit: type=1326 audit(1779637336.037:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.2.1259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  703.548906][   T37] audit: type=1326 audit(1779637336.067:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.2.1259" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  704.514157][ T6336] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  704.677048][ T6336] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  704.677089][ T6336] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  704.677120][ T6336] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  704.677137][ T6336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  704.745562][ T6336] usb 5-1: config 0 descriptor??
[  704.746597][ T9908] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  704.978021][ T6336] ath6kl: Failed to submit usb control message: -71
[  704.978059][ T6336] ath6kl: unable to send the bmi data to the device: -71
[  704.978075][ T6336] ath6kl: Unable to send get target info: -71
[  704.983035][ T6336] ath6kl: Failed to init ath6kl core: -71
[  705.027757][ T6336] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  705.054570][ T6336] usb 5-1: USB disconnect, device number 17
[  708.109684][ T9935] fuse: Bad value for 'user_id'
[  708.109711][ T9935] fuse: Bad value for 'user_id'
[  708.904021][ T5714] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  709.054018][ T5714] usb 1-1: Using ep0 maxpacket: 32
[  709.061229][ T5714] usb 1-1: config 5 has an invalid interface number: 238 but max is 0
[  709.061262][ T5714] usb 1-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  709.061284][ T5714] usb 1-1: config 5 has no interface number 0
[  709.061330][ T5714] usb 1-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  709.061357][ T5714] usb 1-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  709.061404][ T5714] usb 1-1: config 5 interface 238 has no altsetting 0
[  709.100493][ T5714] usb 1-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  709.100642][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.100706][ T5714] usb 1-1: Product: syz
[  709.100760][ T5714] usb 1-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  709.102982][ T5714] usb 1-1: SerialNumber: syz
[  709.192571][ T9947] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  709.303113][   T37] audit: type=1326 audit(1779637341.827:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9951 comm="syz.2.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  709.439457][ T9947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  709.446505][ T9947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  709.529572][   T37] audit: type=1326 audit(1779637342.057:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9951 comm="syz.2.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  709.565925][   T37] audit: type=1326 audit(1779637342.057:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9951 comm="syz.2.1273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  711.353725][ T5714] usb 1-1: unsupported MDLM descriptors
[  711.414608][ T5714] usb 1-1: USB disconnect, device number 17
[  713.084012][ T5735] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  713.297080][ T5735] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  713.297128][ T5735] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  713.297166][ T5735] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  713.297185][ T5735] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.284965][ T5735] usb 3-1: config 0 descriptor??
[  714.311559][ T9975] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  714.572758][ T5735] ath6kl: Failed to submit usb control message: -71
[  714.572796][ T5735] ath6kl: unable to send the bmi data to the device: -71
[  714.572807][ T5735] ath6kl: Unable to send get target info: -71
[  714.578507][ T5735] ath6kl: Failed to init ath6kl core: -71
[  714.651437][ T5735] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  714.758436][ T5735] usb 3-1: USB disconnect, device number 17
[  715.515699][ T9994] fuse: Bad value for 'user_id'
[  715.515722][ T9994] fuse: Bad value for 'user_id'
[  716.044065][ T5735] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  716.176844][ T9999] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1283'.
[  716.228879][ T5735] usb 1-1: Using ep0 maxpacket: 8
[  716.273651][ T5735] usb 1-1: config 0 has an invalid interface number: 31 but max is 0
[  716.273702][ T5735] usb 1-1: config 0 has no interface number 0
[  716.337343][ T5735] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  716.337366][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.337381][ T5735] usb 1-1: Product: syz
[  716.337392][ T5735] usb 1-1: Manufacturer: syz
[  716.337437][ T5735] usb 1-1: SerialNumber: syz
[  716.445139][ T5735] usb 1-1: config 0 descriptor??
[  717.769770][   T37] audit: type=1326 audit(1779637350.297:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.3.1286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  717.840651][   T37] audit: type=1326 audit(1779637350.357:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.3.1286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  717.843150][   T37] audit: type=1326 audit(1779637350.367:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10006 comm="syz.3.1286" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  717.854049][ T5713] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  718.004792][ T5713] usb 3-1: Using ep0 maxpacket: 32
[  718.020084][ T5713] usb 3-1: config 5 has an invalid interface number: 238 but max is 0
[  718.020117][ T5713] usb 3-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  718.020139][ T5713] usb 3-1: config 5 has no interface number 0
[  718.020186][ T5713] usb 3-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  718.020212][ T5713] usb 3-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  718.020246][ T5713] usb 3-1: config 5 interface 238 has no altsetting 0
[  718.087398][ T5713] usb 3-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  718.087434][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.087457][ T5713] usb 3-1: Product: syz
[  718.087473][ T5713] usb 3-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  718.087509][ T5713] usb 3-1: SerialNumber: syz
[  718.184891][T10005] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  718.438445][T10005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.454953][T10005] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.671591][ T5713] usb 3-1: unsupported MDLM descriptors
[  719.850602][ T5713] usb 3-1: USB disconnect, device number 18
[  721.891735][ T5735] uvcvideo 1-1:0.31: Found UVC 0.04 device syz (046d:08c3)
[  721.891878][ T5735] uvcvideo 1-1:0.31: No valid video chain found.
[  722.434951][ T5735] usb 1-1: USB disconnect, device number 18
[  723.617131][T10041] fuse: Bad value for 'fd'
[  725.014526][   T37] audit: type=1326 audit(1779637357.527:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10054 comm="syz.0.1299" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  725.116243][ T5733] IPVS: starting estimator thread 0...
[  725.234082][T10060] IPVS: using max 8 ests per chain, 19200 per kthread
[  725.743977][ T5733] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  725.904136][ T5733] usb 2-1: Using ep0 maxpacket: 32
[  725.908285][ T5733] usb 2-1: config 5 has an invalid interface number: 238 but max is 0
[  725.908318][ T5733] usb 2-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  725.908340][ T5733] usb 2-1: config 5 has no interface number 0
[  725.908387][ T5733] usb 2-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  725.908414][ T5733] usb 2-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  725.908444][ T5733] usb 2-1: config 5 interface 238 has no altsetting 0
[  725.911967][ T5733] usb 2-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  725.912000][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.912024][ T5733] usb 2-1: Product: syz
[  725.912041][ T5733] usb 2-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  725.912075][ T5733] usb 2-1: SerialNumber: syz
[  726.061507][T10064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  727.141910][T10064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  727.142534][T10064] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  727.850134][ T5733] usb 2-1: unsupported MDLM descriptors
[  727.898031][ T5733] usb 2-1: USB disconnect, device number 19
[  727.904009][ T5735] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  727.906051][ T6336] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  728.070016][ T5735] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  728.070050][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  728.070065][ T5735] usb 1-1: Product: syz
[  728.070076][ T5735] usb 1-1: Manufacturer: syz
[  728.070086][ T5735] usb 1-1: SerialNumber: syz
[  728.079578][ T6336] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  728.079717][ T6336] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  728.079836][ T6336] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  728.079907][ T6336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.152714][ T5735] usb 1-1: config 0 descriptor??
[  728.162675][ T6336] usb 4-1: config 0 descriptor??
[  728.163499][T10082] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  728.376891][ T6336] ath6kl: Failed to submit usb control message: -71
[  728.376946][ T6336] ath6kl: unable to send the bmi data to the device: -71
[  728.376964][ T6336] ath6kl: Unable to send get target info: -71
[  728.392162][ T6336] ath6kl: Failed to init ath6kl core: -71
[  728.442681][ T6336] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  728.482938][ T5735] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  728.497673][ T6336] usb 4-1: USB disconnect, device number 10
[  729.203623][T10091] fuse: Bad value for 'fd'
[  729.690388][   T37] audit: type=1326 audit(1779637362.207:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10093 comm="syz.2.1311" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  729.739295][   T37] audit: type=1326 audit(1779637362.267:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10093 comm="syz.2.1311" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  729.769771][   T37] audit: type=1326 audit(1779637362.297:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10093 comm="syz.2.1311" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a451ce59 code=0x7fc00000
[  730.527121][ T5735] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  730.602533][ T5735] usb 1-1: USB disconnect, device number 19
[  732.824527][ T6336] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  732.921574][T10132] FAULT_INJECTION: forcing a failure.
[  732.921574][T10132] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  732.921608][T10132] CPU: 1 UID: 0 PID: 10132 Comm: syz.3.1321 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  732.921632][T10132] Tainted: [L]=SOFTLOCKUP
[  732.921638][T10132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  732.921649][T10132] Call Trace:
[  732.921656][T10132]  <TASK>
[  732.921663][T10132]  dump_stack_lvl+0xe8/0x150
[  732.921690][T10132]  should_fail_ex+0x46b/0x600
[  732.921713][T10132]  _copy_from_user+0x2d/0xb0
[  732.921736][T10132]  video_usercopy+0x36f/0x1450
[  732.921767][T10132]  ? smk_tskacc+0x311/0x3a0
[  732.921787][T10132]  ? __pfx___video_do_ioctl+0x10/0x10
[  732.921814][T10132]  ? __pfx_video_usercopy+0x10/0x10
[  732.921837][T10132]  ? smack_file_ioctl+0x2c2/0x360
[  732.921873][T10132]  ? __fget_files+0x2a/0x420
[  732.921891][T10132]  ? __fget_files+0x3a6/0x420
[  732.921909][T10132]  v4l2_ioctl+0x190/0x1e0
[  732.921949][T10132]  ? __pfx_v4l2_ioctl+0x10/0x10
[  732.921972][T10132]  __se_sys_ioctl+0xff/0x170
[  732.921994][T10132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.922014][T10132]  do_syscall_64+0x15f/0xf80
[  732.922041][T10132]  ? trace_irq_disable+0x3b/0x140
[  732.922064][T10132]  ? clear_bhb_loop+0x40/0x90
[  732.922086][T10132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.922104][T10132] RIP: 0033:0x7fde2327ce59
[  732.922125][T10132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.922142][T10132] RSP: 002b:00007fde214d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  732.922163][T10132] RAX: ffffffffffffffda RBX: 00007fde234f5fa0 RCX: 00007fde2327ce59
[  732.922178][T10132] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003
[  732.922190][T10132] RBP: 00007fde214d6090 R08: 0000000000000000 R09: 0000000000000000
[  732.922201][T10132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  732.922211][T10132] R13: 00007fde234f6038 R14: 00007fde234f5fa0 R15: 00007fff40297e08
[  732.922239][T10132]  </TASK>
[  732.977704][ T6336] usb 5-1: Using ep0 maxpacket: 32
[  733.174264][ T6336] usb 5-1: config 5 has an invalid interface number: 238 but max is 0
[  733.174301][ T6336] usb 5-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  733.174316][ T6336] usb 5-1: config 5 has no interface number 0
[  733.174350][ T6336] usb 5-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  733.174368][ T6336] usb 5-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  733.174389][ T6336] usb 5-1: config 5 interface 238 has no altsetting 0
[  733.178837][ T6336] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  733.178862][ T6336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.178878][ T6336] usb 5-1: Product: syz
[  733.178897][ T6336] usb 5-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  733.178922][ T6336] usb 5-1: SerialNumber: syz
[  733.349143][T10126] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  733.406111][T10135] fuse: Bad value for 'fd'
[  733.567906][T10126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  733.585800][T10126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  735.922554][ T6336] usb 5-1: unsupported MDLM descriptors
[  735.971225][ T6336] usb 5-1: USB disconnect, device number 18
[  736.629182][   T37] audit: type=1326 audit(1779637369.107:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.3.1325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  736.901367][   T37] audit: type=1326 audit(1779637369.427:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.3.1325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  736.902686][   T37] audit: type=1326 audit(1779637369.427:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10141 comm="syz.3.1325" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde2327ce59 code=0x7fc00000
[  737.267824][T10160] fuse: Unknown parameter '0x0000000000000003'
[  738.118154][T10172] fuse: Bad value for 'fd'
[  738.528922][T10177] syzkaller0: entered promiscuous mode
[  738.528952][T10177] syzkaller0: entered allmulticast mode
[  738.661963][T10180] tipc: Started in network mode
[  738.661998][T10180] tipc: Node identity be640b012249, cluster identity 4711
[  738.662781][T10180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  738.721695][T10176] tipc: Resetting bearer <eth:syzkaller0>
[  739.063974][  T821] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  739.156601][T10176] tipc: Disabling bearer <eth:syzkaller0>
[  739.225376][  T821] usb 4-1: Using ep0 maxpacket: 16
[  739.228388][  T821] usb 4-1: config 9 has an invalid interface number: 226 but max is 0
[  739.228421][  T821] usb 4-1: config 9 has no interface number 0
[  739.228456][  T821] usb 4-1: config 9 interface 226 has no altsetting 0
[  739.231581][  T821] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=dc.fd
[  739.231622][  T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.231644][  T821] usb 4-1: Product: syz
[  739.231659][  T821] usb 4-1: Manufacturer: syz
[  739.231674][  T821] usb 4-1: SerialNumber: syz
[  739.253956][ T6336] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  739.444858][ T6336] usb 5-1: Using ep0 maxpacket: 32
[  739.467107][ T6336] usb 5-1: config 5 has an invalid interface number: 238 but max is 0
[  739.467140][ T6336] usb 5-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  739.467162][ T6336] usb 5-1: config 5 has no interface number 0
[  739.467210][ T6336] usb 5-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  739.467237][ T6336] usb 5-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  739.467267][ T6336] usb 5-1: config 5 interface 238 has no altsetting 0
[  739.527368][ T6336] usb 5-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  739.527398][ T6336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.527417][ T6336] usb 5-1: Product: syz
[  739.527430][ T6336] usb 5-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  739.527459][ T6336] usb 5-1: SerialNumber: syz
[  739.604927][T10183] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  739.690257][  T821] mdc800 4-1:9.226: probe fails -> wrong Interface
[  739.780313][  T821] usb 4-1: USB disconnect, device number 11
[  739.834819][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.839777][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  740.479523][ T6336] usb 5-1: unsupported MDLM descriptors
[  740.499943][ T6336] usb 5-1: USB disconnect, device number 19
[  742.780098][T10214] fuse: Unknown parameter '0x0000000000000003'
[  743.794045][  T821] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  743.919664][T10225] fuse: Bad value for 'fd'
[  743.952750][  T821] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  743.952785][  T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.952809][  T821] usb 3-1: Product: syz
[  743.952824][  T821] usb 3-1: Manufacturer: syz
[  743.952839][  T821] usb 3-1: SerialNumber: syz
[  745.181808][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  745.181869][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  745.323522][  T821] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  745.362905][  T821] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71
[  745.389974][  T821] usb 3-1: USB disconnect, device number 19
[  747.704956][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  748.391263][  T821] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  748.438442][T10254] sctp: [Deprecated]: syz.0.1358 (pid 10254) Use of struct sctp_assoc_value in delayed_ack socket option.
[  748.438442][T10254] Use struct sctp_sack_info instead
[  748.545360][  T821] usb 5-1: Using ep0 maxpacket: 8
[  748.551153][  T821] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  748.551197][  T821] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  748.551214][  T821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  748.551232][  T821] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  748.551250][  T821] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  748.551282][  T821] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  748.551299][  T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  748.703983][ T5866] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  748.844021][ T5866] usb 1-1: device descriptor read/64, error -71
[  748.865757][T10257] fuse: Unknown parameter '0x0000000000000003'
[  748.968939][  T821] usb 5-1: GET_CAPABILITIES returned 0
[  748.968977][  T821] usbtmc 5-1:16.0: can't read capabilities
[  749.160217][ T4917] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  749.160250][ T4917] CPU: 1 UID: 0 PID: 4917 Comm: kworker/u9:1 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  749.160284][ T4917] Tainted: [L]=SOFTLOCKUP
[  749.160293][ T4917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  749.160307][ T4917] Workqueue: hci0 hci_rx_work
[  749.160450][ T4917] Call Trace:
[  749.160460][ T4917]  <TASK>
[  749.160472][ T4917]  dump_stack_lvl+0xe8/0x150
[  749.160506][ T4917]  sysfs_create_dir_ns+0x271/0x2a0
[  749.160542][ T4917]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  749.160572][ T4917]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  749.160612][ T4917]  ? rt_spin_unlock+0x160/0x200
[  749.160642][ T4917]  kobject_add_internal+0x631/0xd10
[  749.160709][ T4917]  kobject_add+0x163/0x240
[  749.160784][ T4917]  ? __pfx_kobject_add+0x10/0x10
[  749.160831][ T4917]  ? get_device_parent+0x370/0x3a0
[  749.160864][ T4917]  device_add+0x408/0xbb0
[  749.160896][ T4917]  hci_conn_add_sysfs+0xd5/0x210
[  749.160953][ T4917]  le_conn_complete_evt+0x10e6/0x16b0
[  749.161012][ T4917]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  749.161037][ T4917]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  749.161070][ T4917]  ? lockdep_hardirqs_on+0x7a/0x110
[  749.161105][ T4917]  ? skb_pull_data+0xfb/0x200
[  749.161164][ T4917]  hci_le_conn_complete_evt+0x187/0x470
[  749.161233][ T4917]  hci_event_packet+0x659/0xef0
[  749.161273][ T4917]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  749.161300][ T4917]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  749.161335][ T4917]  ? __pfx_hci_event_packet+0x10/0x10
[  749.161365][ T4917]  ? rt_spin_unlock+0x14f/0x200
[  749.161399][ T4917]  ? hci_send_to_monitor+0xe2/0x590
[  749.161427][ T4917]  hci_rx_work+0x3ee/0x1040
[  749.161466][ T4917]  ? process_scheduled_works+0xa70/0x1860
[  749.161491][ T4917]  process_scheduled_works+0xb5d/0x1860
[  749.161554][ T4917]  ? __pfx_process_scheduled_works+0x10/0x10
[  749.161587][ T4917]  ? assign_work+0x3d5/0x5e0
[  749.161619][ T4917]  worker_thread+0xa53/0xfc0
[  749.161678][ T4917]  kthread+0x388/0x470
[  749.161710][ T4917]  ? __pfx_worker_thread+0x10/0x10
[  749.161734][ T4917]  ? __pfx_kthread+0x10/0x10
[  749.161766][ T4917]  ret_from_fork+0x514/0xb70
[  749.161806][ T4917]  ? __pfx_ret_from_fork+0x10/0x10
[  749.161833][ T4917]  ? __switch_to+0xc79/0x1410
[  749.161871][ T4917]  ? __pfx_kthread+0x10/0x10
[  749.161904][ T4917]  ret_from_fork_asm+0x1a/0x30
[  749.161954][ T4917]  </TASK>
[  749.161993][ T4917] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  749.162039][ T4917] Bluetooth: hci0: failed to register connection device
[  749.363404][ T5866] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  749.489080][T10262] comedi comedi0: comedi_config --init_data is deprecated
[  749.544175][ T5866] usb 1-1: device descriptor read/64, error -71
[  749.786023][ T5866] usb usb1-port1: attempt power cycle
[  750.164354][ T5866] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  750.184729][ T5866] usb 1-1: device descriptor read/8, error -71
[  750.366426][T10269] fuse: Bad value for 'fd'
[  750.434123][ T5866] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  750.455253][ T5866] usb 1-1: device descriptor read/8, error -71
[  751.134552][ T5866] usb usb1-port1: unable to enumerate USB device
[  751.191702][   T36] usb 5-1: USB disconnect, device number 20
[  751.193639][T10275] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1364'.
[  751.308466][T10275] bridge0: port 2(bridge_slave_1) entered disabled state
[  751.318332][T10275] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.615307][   T37] audit: type=1326 audit(1779637388.147:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10300 comm="syz.1.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  755.968304][   T37] audit: type=1326 audit(1779637388.497:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10310 comm="syz.3.1376" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde2327ce59 code=0x0
[  756.107919][   T37] audit: type=1326 audit(1779637388.637:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10300 comm="syz.1.1373" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f50c437ce59 code=0x7fc00000
[  756.283984][ T5700] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  756.424529][T10319] fuse: Invalid rootmode
[  756.440363][ T5700] usb 4-1: Using ep0 maxpacket: 8
[  756.475761][ T5700] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  756.475828][ T5700] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e
[  756.475853][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.481390][ T5700] usb 4-1: config 0 descriptor??
[  756.526616][ T5700] rndis_host 4-1:0.0: missing cdc header descriptor
[  756.541300][ T5700] cdc_acm 4-1:0.0: Control and data interfaces are not separated!
[  756.541323][ T5700] cdc_acm 4-1:0.0: This needs exactly 3 endpoints
[  756.541367][ T5700] cdc_acm 4-1:0.0: probe with driver cdc_acm failed with error -22
[  756.806928][ T5611] Bluetooth: hci0: command 0x0406 tx timeout
[  757.140332][ T5866] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  757.274001][ T5866] usb 2-1: device descriptor read/64, error -71
[  757.534115][ T5866] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  757.642797][T10333] sctp: [Deprecated]: syz.2.1381 (pid 10333) Use of struct sctp_assoc_value in delayed_ack socket option.
[  757.642797][T10333] Use struct sctp_sack_info instead
[  757.917497][ T5866] usb 2-1: device descriptor read/64, error -71
[  757.968912][    T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0)
[  758.549611][ T5866] usb usb2-port1: attempt power cycle
[  759.054336][ T9220] usb 4-1: USB disconnect, device number 12
[  759.342612][ T5866] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  759.356010][ T5866] usb 2-1: device descriptor read/8, error -71
[  759.422542][T10343] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1384'.
[  759.614051][ T5866] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  759.635018][ T5866] usb 2-1: device descriptor read/8, error -71
[  759.745113][ T5866] usb usb2-port1: unable to enumerate USB device
[  761.407321][   T37] audit: type=1326 audit(1779637393.937:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10363 comm="syz.1.1390" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50c437ce59 code=0x0
[  762.115901][   T37] audit: type=1326 audit(1779637394.637:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10355 comm="syz.4.1389" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  764.429192][T10386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1398'.
[  766.289368][T10397] overlayfs: failed to resolve '/�': -2
[  766.335930][T10398] overlayfs: overlapping lowerdir path
[  767.922677][T10410] netlink: 'syz.3.1404': attribute type 2 has an invalid length.
[  768.021897][T10408] IPVS: Unknown mcast interface: 211
[  768.488856][T10414] FAULT_INJECTION: forcing a failure.
[  768.488856][T10414] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  768.488895][T10414] CPU: 1 UID: 0 PID: 10414 Comm: syz.3.1408 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  768.488925][T10414] Tainted: [L]=SOFTLOCKUP
[  768.488932][T10414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  768.488946][T10414] Call Trace:
[  768.488954][T10414]  <TASK>
[  768.488964][T10414]  dump_stack_lvl+0xe8/0x150
[  768.488995][T10414]  should_fail_ex+0x46b/0x600
[  768.489025][T10414]  _copy_from_user+0x2d/0xb0
[  768.489053][T10414]  scsi_ioctl+0x4d1/0x2130
[  768.489093][T10414]  ? __pfx_scsi_ioctl+0x10/0x10
[  768.489162][T10414]  ? kasan_quarantine_put+0xbb/0x1f0
[  768.489205][T10414]  ? scsi_block_when_processing_errors+0x44f/0x540
[  768.489232][T10414]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[  768.489263][T10414]  ? vfs_write+0x9ce/0xba0
[  768.489308][T10414]  sg_ioctl+0x1125/0x21a0
[  768.489347][T10414]  ? __pfx_smack_file_ioctl+0x10/0x10
[  768.489377][T10414]  ? __pfx_sg_ioctl+0x10/0x10
[  768.489419][T10414]  ? ksys_write+0x202/0x270
[  768.489450][T10414]  ? bpf_lsm_file_ioctl+0x9/0x20
[  768.489476][T10414]  ? __pfx_sg_ioctl+0x10/0x10
[  768.489505][T10414]  __se_sys_ioctl+0xff/0x170
[  768.489531][T10414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.489556][T10414]  do_syscall_64+0x15f/0xf80
[  768.489586][T10414]  ? trace_irq_disable+0x3b/0x140
[  768.489612][T10414]  ? clear_bhb_loop+0x40/0x90
[  768.489639][T10414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  768.489661][T10414] RIP: 0033:0x7fde2327ce59
[  768.489682][T10414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  768.489700][T10414] RSP: 002b:00007fde214d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  768.489721][T10414] RAX: ffffffffffffffda RBX: 00007fde234f5fa0 RCX: 00007fde2327ce59
[  768.489738][T10414] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000004
[  768.489751][T10414] RBP: 00007fde214d6090 R08: 0000000000000000 R09: 0000000000000000
[  768.489764][T10414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  768.489778][T10414] R13: 00007fde234f6038 R14: 00007fde234f5fa0 R15: 00007fff40297e08
[  768.489812][T10414]  </TASK>
[  769.404861][ T5700] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  769.580962][   T37] audit: type=1326 audit(1779637402.107:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10417 comm="syz.0.1405" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  769.590369][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  769.590474][ T5700] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  769.590622][ T5700] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  769.590694][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.675781][ T5700] usb 5-1: config 0 descriptor??
[  769.677599][T10422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  770.026363][ T5700] ath6kl: Failed to submit usb control message: -71
[  770.026403][ T5700] ath6kl: unable to send the bmi data to the device: -71
[  770.026414][ T5700] ath6kl: Unable to send get target info: -71
[  770.027425][ T5700] ath6kl: Failed to init ath6kl core: -71
[  770.028429][ T5700] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  770.141191][ T5700] usb 5-1: USB disconnect, device number 21
[  770.589781][T10429] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1410'.
[  770.850534][T10431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1411'.
[  773.320242][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  773.483991][    T9] usb 3-1: Using ep0 maxpacket: 32
[  773.507455][    T9] usb 3-1: config 5 has an invalid interface number: 238 but max is 0
[  773.507488][    T9] usb 3-1: config 5 has an invalid interface association descriptor of length 2, skipping
[  773.507510][    T9] usb 3-1: config 5 has no interface number 0
[  773.507555][    T9] usb 3-1: config 5 interface 238 altsetting 10 has an invalid descriptor for endpoint zero, skipping
[  773.507584][    T9] usb 3-1: config 5 interface 238 altsetting 10 endpoint 0x3 has invalid maxpacket 1536, setting to 64
[  773.507613][    T9] usb 3-1: config 5 interface 238 has no altsetting 0
[  773.577409][    T9] usb 3-1: New USB device found, idVendor=04dd, idProduct=8006, bcdDevice=d7.0a
[  773.577447][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  773.577462][    T9] usb 3-1: Product: syz
[  773.577473][    T9] usb 3-1: Manufacturer: 흀䝡碑찞䄖唘으況ꊡ죽罅偆㽳妦只ۓ栄莬鱛ម钙납唁䒞䵇뿾턩눐喋⸡ו牙뎾猗暋忟퀱祿깣뷬큣쥉टǷ卑㷻ᯉ閶䊋男ꓛ⽗浦ᶙ曣鐭ᅆ쎎죢皑￦釕묿괯Ⱪ勨✦儥ᱹ崶圅榗桩䍈鼯亍ꚬ⻂낵ꝡ䲳㚨ꌊ≃꟫䩆儢玶ప⵰趆
[  773.577499][    T9] usb 3-1: SerialNumber: syz
[  773.678307][T10444] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  773.908139][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  773.964114][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.036265][T10453] netlink: 'syz.1.1418': attribute type 2 has an invalid length.
[  774.693516][    T9] usb 3-1: unsupported MDLM descriptors
[  774.737012][    T9] usb 3-1: USB disconnect, device number 20
[  776.433982][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  776.598469][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  776.598497][    T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  776.598528][    T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  776.598546][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.641058][   T37] audit: type=1326 audit(1779637409.167:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10461 comm="syz.0.1422" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9330ce59 code=0x7fc00000
[  776.684338][    T9] usb 3-1: config 0 descriptor??
[  776.685125][T10469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  776.902191][    T9] ath6kl: Failed to submit usb control message: -71
[  776.902231][    T9] ath6kl: unable to send the bmi data to the device: -71
[  776.902243][    T9] ath6kl: Unable to send get target info: -71
[  777.026471][    T9] ath6kl: Failed to init ath6kl core: -71
[  777.028010][    T9] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71
[  777.279311][    T9] usb 3-1: USB disconnect, device number 21
[  782.523489][   T37] audit: type=1326 audit(1779637415.047:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.4.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  782.611109][T10521] FAULT_INJECTION: forcing a failure.
[  782.611109][T10521] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  782.611171][T10521] CPU: 1 UID: 0 PID: 10521 Comm: syz.3.1442 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  782.611208][T10521] Tainted: [L]=SOFTLOCKUP
[  782.611216][T10521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  782.611232][T10521] Call Trace:
[  782.611242][T10521]  <TASK>
[  782.611253][T10521]  dump_stack_lvl+0xe8/0x150
[  782.611293][T10521]  should_fail_ex+0x46b/0x600
[  782.611340][T10521]  _copy_to_user+0x31/0xb0
[  782.611376][T10521]  simple_read_from_buffer+0xe1/0x170
[  782.611425][T10521]  proc_fail_nth_read+0x1be/0x230
[  782.611459][T10521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  782.611491][T10521]  ? rw_verify_area+0x2ac/0x4e0
[  782.611521][T10521]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  782.611550][T10521]  vfs_read+0x212/0xa80
[  782.611592][T10521]  ? __pfx_vfs_read+0x10/0x10
[  782.611624][T10521]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  782.611665][T10521]  ? lockdep_hardirqs_on+0x7a/0x110
[  782.611702][T10521]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  782.611744][T10521]  ? mutex_lock_nested+0x152/0x1d0
[  782.611773][T10521]  ? fdget_pos+0x252/0x320
[  782.611808][T10521]  ksys_read+0x156/0x270
[  782.611842][T10521]  ? __pfx_ksys_read+0x10/0x10
[  782.611883][T10521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.611913][T10521]  do_syscall_64+0x15f/0xf80
[  782.611947][T10521]  ? trace_irq_disable+0x3b/0x140
[  782.611978][T10521]  ? clear_bhb_loop+0x40/0x90
[  782.612013][T10521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  782.612038][T10521] RIP: 0033:0x7fde2323d68e
[  782.612064][T10521] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  782.612088][T10521] RSP: 002b:00007fde214b4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  782.612120][T10521] RAX: ffffffffffffffda RBX: 00007fde214b56c0 RCX: 00007fde2323d68e
[  782.612140][T10521] RDX: 000000000000000f RSI: 00007fde214b50a0 RDI: 0000000000000004
[  782.612157][T10521] RBP: 00007fde214b5090 R08: 0000000000000000 R09: 0000000000000000
[  782.612175][T10521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  782.612192][T10521] R13: 00007fde234f6128 R14: 00007fde234f6090 R15: 00007fff40297e08
[  782.612236][T10521]  </TASK>
[  783.088332][   T37] audit: type=1326 audit(1779637415.287:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10513 comm="syz.4.1439" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f339124ce59 code=0x7fc00000
[  783.148054][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'.
[  783.148081][T10532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1444'.
[  784.245182][ T6336] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  784.952729][ T6336] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  784.952764][ T6336] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.952786][ T6336] usb 1-1: Product: syz
[  784.952802][ T6336] usb 1-1: Manufacturer: syz
[  784.952817][ T6336] usb 1-1: SerialNumber: syz
[  785.065947][ T6336] usb 1-1: config 0 descriptor??
[  785.427893][T10534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  785.472303][T10534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.177369][T10557] Driver unsupported XDP return value 0 on prog  (id 178) dev N/A, expect packet loss!
[  787.296486][ T6336] usb 1-1: USB disconnect, device number 24
[  788.857034][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'.
[  788.857058][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1457'.
[  790.955731][ T5713] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  791.117035][ T5713] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  791.117069][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  791.117092][ T5713] usb 3-1: Product: syz
[  791.117108][ T5713] usb 3-1: Manufacturer: syz
[  791.117124][ T5713] usb 3-1: SerialNumber: syz
[  791.166879][ T5713] usb 3-1: config 0 descriptor??
[  791.807647][ T5713] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  792.133295][T10589] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  792.435479][ T6336] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  792.524578][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1464'.
[  792.584048][ T6336] usb 2-1: Using ep0 maxpacket: 8
[  792.590159][ T6336] usb 2-1: config 168 has an invalid interface number: 255 but max is 0
[  792.590189][ T6336] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  792.590212][ T6336] usb 2-1: config 168 has no interface number 0
[  792.590316][ T6336] usb 2-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30
[  792.590359][ T6336] usb 2-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  792.590407][ T6336] usb 2-1: config 168 interface 255 has no altsetting 0
[  792.605293][ T6336] usb 2-1: config 168 has an invalid interface number: 255 but max is 0
[  792.605416][ T6336] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  792.605444][ T6336] usb 2-1: config 168 has no interface number 0
[  792.605482][ T6336] usb 2-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30
[  792.610312][ T6336] usb 2-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  792.610358][ T6336] usb 2-1: config 168 interface 255 has no altsetting 0
[  792.671015][ T6336] usb 2-1: config 168 has an invalid interface number: 255 but max is 0
[  792.671043][ T6336] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  792.686729][ T6336] usb 2-1: config 168 has no interface number 0
[  792.686766][ T6336] usb 2-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30
[  792.686796][ T6336] usb 2-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  792.686817][ T6336] usb 2-1: config 168 interface 255 has no altsetting 0
[  792.784753][ T6336] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  792.784786][ T6336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.784807][T10595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1465'.
[  792.785050][ T6336] usb 2-1: Product: syz
[  792.785067][ T6336] usb 2-1: Manufacturer: syz
[  792.785082][ T6336] usb 2-1: SerialNumber: syz
[  793.390001][ T5713] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  793.448192][ T5713] usb 3-1: USB disconnect, device number 22
[  793.526572][ T6336] adutux 2-1:168.255: interrupt endpoints not found
[  793.550543][ T6336] usb 2-1: USB disconnect, device number 24
[  794.577294][T10610] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1469'.
[  802.530757][T10662] bond1: entered promiscuous mode
[  802.533359][T10662] 8021q: adding VLAN 0 to HW filter on device bond1
[  803.600078][T10671] bridge1: entered promiscuous mode
[  807.245569][T10710] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  807.245599][T10710] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  807.689620][T10710] vhci_hcd vhci_hcd.0: Device attached
[  807.712022][T10717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1499'.
[  807.770361][T10711] vhci_hcd: connection closed
[  807.778675][ T5866] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  807.992429][T10712] vhci_hcd: sendmsg failed!, ret=-32 for 48
[  808.007180][  T364] vhci_hcd vhci_hcd.2: stop threads
[  808.051082][  T364] vhci_hcd vhci_hcd.2: release socket
[  808.786209][  T364] vhci_hcd vhci_hcd.2: disconnect device
[  809.592880][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[  810.756392][T10744] bond1: entered promiscuous mode
[  810.827179][T10744] 8021q: adding VLAN 0 to HW filter on device bond1
[  811.490379][T10748] bridge1: entered promiscuous mode
[  811.506184][    T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  811.532395][T10754] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1513'.
[  811.676054][    T9] usb 4-1: Using ep0 maxpacket: 32
[  811.679226][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  811.681283][    T9] usb 4-1: config 7 has an invalid interface number: 15 but max is 0
[  811.681315][    T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  811.681336][    T9] usb 4-1: config 7 has no interface number 0
[  811.681368][    T9] usb 4-1: config 7 interface 15 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0
[  811.686201][    T9] usb 4-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice=9d.17
[  811.686225][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  811.686304][    T9] usb 4-1: Product: syz
[  811.686316][    T9] usb 4-1: Manufacturer: syz
[  811.686327][    T9] usb 4-1: SerialNumber: syz
[  811.803233][T10752] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  812.095582][    T9] s2255 4-1:7.15: Could not find bulk-in endpoint
[  812.095686][    T9] Sensoray 2255 driver load failed: 0xfffffff4
[  812.095720][    T9] s2255 4-1:7.15: probe with driver s2255 failed with error -12
[  812.168972][    T9] usb 4-1: USB disconnect, device number 13
[  813.267284][T10765] FAULT_INJECTION: forcing a failure.
[  813.267284][T10765] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  813.267319][T10765] CPU: 0 UID: 0 PID: 10765 Comm: syz.4.1516 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  813.267342][T10765] Tainted: [L]=SOFTLOCKUP
[  813.267347][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  813.267358][T10765] Call Trace:
[  813.267363][T10765]  <TASK>
[  813.267370][T10765]  dump_stack_lvl+0xe8/0x150
[  813.267395][T10765]  should_fail_ex+0x46b/0x600
[  813.267447][T10765]  prepare_alloc_pages+0x22a/0x6b0
[  813.267489][T10765]  __alloc_frozen_pages_noprof+0x12f/0x380
[  813.267514][T10765]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  813.267539][T10765]  ? __pfx_policy_nodemask+0x10/0x10
[  813.267561][T10765]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  813.267586][T10765]  ? lockdep_hardirqs_on+0x7a/0x110
[  813.267612][T10765]  alloc_pages_mpol+0xd1/0x380
[  813.267634][T10765]  alloc_pages_noprof+0xd2/0x2f0
[  813.267656][T10765]  get_free_pages_noprof+0xf/0x80
[  813.267677][T10765]  __kasan_populate_vmalloc+0x38/0x1d0
[  813.267704][T10765]  ? rt_spin_unlock+0x160/0x200
[  813.267724][T10765]  alloc_vmap_area+0xd47/0x1480
[  813.267753][T10765]  ? __pfx_alloc_vmap_area+0x10/0x10
[  813.267771][T10765]  ? __kmalloc_cache_node_noprof+0x27d/0x6c0
[  813.267792][T10765]  ? __get_vm_area_node+0x171/0x350
[  813.267808][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.267832][T10765]  __get_vm_area_node+0x226/0x350
[  813.267871][T10765]  __vmalloc_node_range_noprof+0x36a/0x1750
[  813.267889][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.267912][T10765]  ? __lock_acquire+0x6b5/0x2cf0
[  813.267947][T10765]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  813.267970][T10765]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  813.268018][T10765]  ? __lock_acquire+0x6b5/0x2cf0
[  813.268068][T10765]  ? _parse_integer_limit+0x1ae/0x1f0
[  813.268105][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.268133][T10765]  __vmalloc_noprof+0xd2/0x120
[  813.268164][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.268187][T10765]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.268212][T10765]  bpf_prog_alloc+0x3c/0x1a0
[  813.268236][T10765]  bpf_prog_load+0x779/0x1a10
[  813.268265][T10765]  ? __pfx_bpf_prog_load+0x10/0x10
[  813.268286][T10765]  ? __might_fault+0xaf/0x130
[  813.268335][T10765]  ? bpf_lsm_bpf+0x9/0x20
[  813.268357][T10765]  ? security_bpf+0x7e/0x2d0
[  813.268385][T10765]  __sys_bpf+0x618/0x950
[  813.268407][T10765]  ? __pfx___sys_bpf+0x10/0x10
[  813.268423][T10765]  ? rt_mutex_slowunlock+0x1cb/0x300
[  813.268454][T10765]  ? ksys_write+0x248/0x270
[  813.268475][T10765]  ? __pfx_ksys_write+0x10/0x10
[  813.268497][T10765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.268515][T10765]  __x64_sys_bpf+0x7c/0x90
[  813.268533][T10765]  do_syscall_64+0x15f/0xf80
[  813.268556][T10765]  ? trace_irq_disable+0x3b/0x140
[  813.268583][T10765]  ? clear_bhb_loop+0x40/0x90
[  813.268604][T10765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.268620][T10765] RIP: 0033:0x7f339124ce59
[  813.268637][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.268652][T10765] RSP: 002b:00007f338f4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  813.268669][T10765] RAX: ffffffffffffffda RBX: 00007f33914c5fa0 RCX: 00007f339124ce59
[  813.268681][T10765] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  813.268692][T10765] RBP: 00007f338f4a6090 R08: 0000000000000000 R09: 0000000000000000
[  813.268701][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.268711][T10765] R13: 00007f33914c6038 R14: 00007f33914c5fa0 R15: 00007ffde3e79118
[  813.268736][T10765]  </TASK>
[  813.312598][T10765] syz.4.1516: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  813.485965][T10765] CPU: 1 UID: 0 PID: 10765 Comm: syz.4.1516 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  813.486071][T10765] Tainted: [L]=SOFTLOCKUP
[  813.486095][T10765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  813.486138][T10765] Call Trace:
[  813.486162][T10765]  <TASK>
[  813.486185][T10765]  dump_stack_lvl+0xe8/0x150
[  813.486281][T10765]  warn_alloc+0x263/0x3e0
[  813.486369][T10765]  ? kasan_quarantine_put+0xbb/0x1f0
[  813.486445][T10765]  ? __pfx_warn_alloc+0x10/0x10
[  813.486536][T10765]  ? __get_vm_area_node+0x23f/0x350
[  813.486613][T10765]  ? __get_vm_area_node+0x171/0x350
[  813.486677][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.486762][T10765]  ? __get_vm_area_node+0x23f/0x350
[  813.486841][T10765]  __vmalloc_node_range_noprof+0x38f/0x1750
[  813.486927][T10765]  ? __lock_acquire+0x6b5/0x2cf0
[  813.487052][T10765]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  813.487113][T10765]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  813.487172][T10765]  ? __lock_acquire+0x6b5/0x2cf0
[  813.487260][T10765]  ? _parse_integer_limit+0x1ae/0x1f0
[  813.487348][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.487424][T10765]  __vmalloc_noprof+0xd2/0x120
[  813.487490][T10765]  ? bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.487575][T10765]  bpf_prog_alloc_no_stats+0x4a/0x4f0
[  813.487668][T10765]  bpf_prog_alloc+0x3c/0x1a0
[  813.487753][T10765]  bpf_prog_load+0x779/0x1a10
[  813.487897][T10765]  ? __pfx_bpf_prog_load+0x10/0x10
[  813.488002][T10765]  ? __might_fault+0xaf/0x130
[  813.488115][T10765]  ? bpf_lsm_bpf+0x9/0x20
[  813.488181][T10765]  ? security_bpf+0x7e/0x2d0
[  813.488287][T10765]  __sys_bpf+0x618/0x950
[  813.488372][T10765]  ? __pfx___sys_bpf+0x10/0x10
[  813.488437][T10765]  ? rt_mutex_slowunlock+0x1cb/0x300
[  813.488566][T10765]  ? ksys_write+0x248/0x270
[  813.488641][T10765]  ? __pfx_ksys_write+0x10/0x10
[  813.488724][T10765]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.488795][T10765]  __x64_sys_bpf+0x7c/0x90
[  813.488860][T10765]  do_syscall_64+0x15f/0xf80
[  813.488937][T10765]  ? trace_irq_disable+0x3b/0x140
[  813.489005][T10765]  ? clear_bhb_loop+0x40/0x90
[  813.489072][T10765]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.489135][T10765] RIP: 0033:0x7f339124ce59
[  813.489190][T10765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.489250][T10765] RSP: 002b:00007f338f4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  813.489334][T10765] RAX: ffffffffffffffda RBX: 00007f33914c5fa0 RCX: 00007f339124ce59
[  813.489385][T10765] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005
[  813.489419][T10765] RBP: 00007f338f4a6090 R08: 0000000000000000 R09: 0000000000000000
[  813.489460][T10765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.489493][T10765] R13: 00007f33914c6038 R14: 00007f33914c5fa0 R15: 00007ffde3e79118
[  813.489579][T10765]  </TASK>
[  813.521144][T10765] Mem-Info:
[  813.521200][T10765] active_anon:182 inactive_anon:20572 isolated_anon:0
[  813.521200][T10765]  active_file:24513 inactive_file:37076 isolated_file:0
[  813.521200][T10765]  unevictable:768 dirty:174 writeback:0
[  813.521200][T10765]  slab_reclaimable:11603 slab_unreclaimable:104286
[  813.521200][T10765]  mapped:40211 shmem:15487 pagetables:1317
[  813.521200][T10765]  sec_pagetables:0 bounce:0
[  813.521200][T10765]  kernel_misc_reclaimable:0
[  813.521200][T10765]  free:1296837 free_pcp:1645 free_cma:0
[  813.521397][T10765] Node 0 active_anon:728kB inactive_anon:82288kB active_file:97644kB inactive_file:148304kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:160632kB dirty:692kB writeback:0kB shmem:60412kB kernel_stack:13224kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  813.521551][T10765] Node 1 active_anon:0kB inactive_anon:0kB active_file:408kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:212kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  813.521698][T10765] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  813.521811][T10765] lowmem_reserve[]: 0 2506 2506 2506 2506
[  813.521900][T10765] Node 0 DMA32 free:1234980kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:728kB inactive_anon:82288kB active_file:97644kB inactive_file:148304kB unevictable:1536kB writepending:692kB zspages:0kB present:3129332kB managed:2566476kB mlocked:0kB bounce:0kB free_pcp:6580kB local_pcp:3148kB free_cma:0kB
[  813.522076][T10765] lowmem_reserve[]: 0 0 0 0 0
[  813.522173][T10765] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:212kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  813.522346][T10765] lowmem_reserve[]: 0 0 0 0 0
[  813.522440][T10765] Node 1 Normal free:3937008kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:408kB inactive_file:0kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  813.522670][T10765] lowmem_reserve[]: 0 0 0 0 0
[  813.536566][T10765] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  813.536916][T10765] Node 0 DMA32: 2778*4kB (UME) 2043*8kB (UM) 1573*16kB (UME) 1355*32kB (UME) 643*64kB (UM) 264*128kB (UM) 92*256kB (UME) 40*512kB (UME) 16*1024kB (UME) 4*2048kB (M) 243*4096kB (UM) = 1234864kB
[  813.537323][T10765] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  813.537614][T10765] Node 1 Normal: 2*4kB (UM) 3*8kB (U) 3*16kB (U) 7*32kB (UM) 3*64kB (U) 2*128kB (U) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 960*4096kB (M) = 3937008kB
[  813.537996][T10765] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  813.538065][T10765] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  813.558149][T10765] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  813.558247][T10765] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  813.558488][T10765] 77147 total pagecache pages
[  813.558511][T10765] 0 pages in swap cache
[  813.558534][T10765] Free swap  = 124996kB
[  813.558555][T10765] Total swap = 124996kB
[  813.558585][T10765] 2097051 pages RAM
[  813.558606][T10765] 0 pages HighMem/MovableOnly
[  813.558627][T10765] 423764 pages reserved
[  813.558641][T10765] 0 pages cma reserved
[  815.832964][ T5866] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  817.350579][T10796] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1526'.
[  819.199104][ T5714] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  819.359650][ T5714] usb 5-1: Using ep0 maxpacket: 32
[  819.386649][ T5714] usb 5-1: New USB device found, idVendor=1235, idProduct=0002, bcdDevice= 0.40
[  819.386675][ T5714] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  819.386690][ T5714] usb 5-1: Product: syz
[  819.386700][ T5714] usb 5-1: Manufacturer: syz
[  819.386711][ T5714] usb 5-1: SerialNumber: syz
[  820.664098][ T5714] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  820.786974][ T5714] usb 5-1: unit 1 not found!
[  821.600524][ T5714] usb 5-1: USB disconnect, device number 22
[  822.273280][ T6336] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  822.567985][ T6336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  822.568026][ T6336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  822.568068][ T6336] usb 1-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00
[  822.568095][ T6336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  822.636642][ T6336] usb 1-1: config 0 descriptor??
[  822.943470][T10834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1539'.
[  825.083663][ T6336] hid_parser_main: 456 callbacks suppressed
[  825.083691][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083725][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083753][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083779][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083805][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083831][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083859][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083885][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083911][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.083938][ T6336] wacom 0003:056A:5012.000C: unknown main item tag 0x0
[  825.169926][ T6336] wacom 0003:056A:5012.000C: reserved main item tag 0xd
[  825.322733][ T6336] usb 1-1: USB disconnect, device number 25
[  826.961594][T10866] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1548'.
[  827.260359][T10862] libceph: resolve '�R�H�e'�ˠ/����1�C��
�~�1W����e�xEA���eSb{~R�' (ret=-3): failed
[  827.279148][   T36] IPVS: starting estimator thread 0...
[  827.335890][T10866] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  827.374422][T10868] IPVS: using max 9 ests per chain, 21600 per kthread
[  827.948013][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1551'.
[  831.382877][ T5866] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  831.594993][ T5866] usb 1-1: Using ep0 maxpacket: 8
[  832.700933][ T5866] usb 1-1: config 0 has no interfaces?
[  832.700976][ T5866] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  832.701002][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.713554][ T5866] usb 1-1: config 0 descriptor??
[  832.930120][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  832.932231][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  832.957556][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  832.958129][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  832.963224][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  832.975297][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.000349][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.000781][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.030412][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  833.033029][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  833.134108][ T6336] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  833.201527][   T36] usb 1-1: USB disconnect, device number 26
[  833.339798][ T6336] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  833.339839][ T6336] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 217
[  833.339871][ T6336] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  833.339891][ T6336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.344656][ T6336] usb 4-1: config 0 descriptor??
[  833.345474][T10904] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  833.771202][ T6336] ath6kl: Failed to submit usb control message: -71
[  833.771255][ T6336] ath6kl: unable to send the bmi data to the device: -71
[  833.771272][ T6336] ath6kl: Unable to send get target info: -71
[  833.833618][ T6336] ath6kl: Failed to init ath6kl core: -71
[  833.835199][ T6336] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  833.865511][ T6336] usb 4-1: USB disconnect, device number 14
[  834.011542][T10915] FAULT_INJECTION: forcing a failure.
[  834.011542][T10915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  834.011572][T10915] CPU: 0 UID: 0 PID: 10915 Comm: syz.2.1560 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  834.011594][T10915] Tainted: [L]=SOFTLOCKUP
[  834.011600][T10915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  834.011610][T10915] Call Trace:
[  834.011615][T10915]  <TASK>
[  834.011622][T10915]  dump_stack_lvl+0xe8/0x150
[  834.011646][T10915]  should_fail_ex+0x46b/0x600
[  834.011668][T10915]  _copy_from_user+0x2d/0xb0
[  834.011688][T10915]  video_usercopy+0x36f/0x1450
[  834.011718][T10915]  ? smk_tskacc+0x311/0x3a0
[  834.011736][T10915]  ? __pfx___video_do_ioctl+0x10/0x10
[  834.011761][T10915]  ? __pfx_video_usercopy+0x10/0x10
[  834.011783][T10915]  ? smack_file_ioctl+0x2c2/0x360
[  834.011815][T10915]  ? __fget_files+0x2a/0x420
[  834.011830][T10915]  ? __fget_files+0x3a6/0x420
[  834.011846][T10915]  v4l2_ioctl+0x190/0x1e0
[  834.011870][T10915]  ? __pfx_v4l2_ioctl+0x10/0x10
[  834.011892][T10915]  __se_sys_ioctl+0xff/0x170
[  834.011911][T10915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.011929][T10915]  do_syscall_64+0x15f/0xf80
[  834.011951][T10915]  ? trace_irq_disable+0x3b/0x140
[  834.011970][T10915]  ? clear_bhb_loop+0x40/0x90
[  834.011990][T10915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.012006][T10915] RIP: 0033:0x7f01a451ce59
[  834.012020][T10915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.012034][T10915] RSP: 002b:00007f01a2776028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  834.012051][T10915] RAX: ffffffffffffffda RBX: 00007f01a4795fa0 RCX: 00007f01a451ce59
[  834.012063][T10915] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000003
[  834.012073][T10915] RBP: 00007f01a2776090 R08: 0000000000000000 R09: 0000000000000000
[  834.012083][T10915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  834.012093][T10915] R13: 00007f01a4796038 R14: 00007f01a4795fa0 R15: 00007ffdae2e3d08
[  834.012118][T10915]  </TASK>
[  835.333012][T10927] sctp: [Deprecated]: syz.3.1561 (pid 10927) Use of struct sctp_assoc_value in delayed_ack socket option.
[  835.333012][T10927] Use struct sctp_sack_info instead
[  843.210970][T10984] sctp: [Deprecated]: syz.1.1577 (pid 10984) Use of struct sctp_assoc_value in delayed_ack socket option.
[  843.210970][T10984] Use struct sctp_sack_info instead
[  849.759865][ T5611] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  849.759898][ T5611] CPU: 1 UID: 0 PID: 5611 Comm: kworker/u9:4 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  849.759932][ T5611] Tainted: [L]=SOFTLOCKUP
[  849.759940][ T5611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  849.759956][ T5611] Workqueue: hci1 hci_rx_work
[  849.760004][ T5611] Call Trace:
[  849.760012][ T5611]  <TASK>
[  849.760024][ T5611]  dump_stack_lvl+0xe8/0x150
[  849.760055][ T5611]  sysfs_create_dir_ns+0x271/0x2a0
[  849.760095][ T5611]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  849.760125][ T5611]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  849.760165][ T5611]  ? rt_spin_unlock+0x160/0x200
[  849.760195][ T5611]  kobject_add_internal+0x631/0xd10
[  849.760229][ T5611]  kobject_add+0x163/0x240
[  849.760272][ T5611]  ? __pfx_kobject_add+0x10/0x10
[  849.760317][ T5611]  ? get_device_parent+0x370/0x3a0
[  849.760358][ T5611]  device_add+0x408/0xbb0
[  849.760396][ T5611]  hci_conn_add_sysfs+0xd5/0x210
[  849.760429][ T5611]  le_conn_complete_evt+0x10e6/0x16b0
[  849.760465][ T5611]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  849.760490][ T5611]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  849.760523][ T5611]  ? lockdep_hardirqs_on+0x7a/0x110
[  849.760557][ T5611]  ? skb_pull_data+0xfb/0x200
[  849.760586][ T5611]  hci_le_conn_complete_evt+0x187/0x470
[  849.760638][ T5611]  hci_event_packet+0x659/0xef0
[  849.760678][ T5611]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  849.760703][ T5611]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  849.760737][ T5611]  ? __pfx_hci_event_packet+0x10/0x10
[  849.760767][ T5611]  ? rt_spin_unlock+0x14f/0x200
[  849.760805][ T5611]  ? hci_send_to_monitor+0xe2/0x590
[  849.760835][ T5611]  hci_rx_work+0x3ee/0x1040
[  849.760875][ T5611]  ? process_scheduled_works+0xa70/0x1860
[  849.760903][ T5611]  process_scheduled_works+0xb5d/0x1860
[  849.760963][ T5611]  ? __pfx_process_scheduled_works+0x10/0x10
[  849.760996][ T5611]  ? assign_work+0x3d5/0x5e0
[  849.761026][ T5611]  worker_thread+0xa53/0xfc0
[  849.761084][ T5611]  kthread+0x388/0x470
[  849.761117][ T5611]  ? __pfx_worker_thread+0x10/0x10
[  849.761139][ T5611]  ? __pfx_kthread+0x10/0x10
[  849.761171][ T5611]  ret_from_fork+0x514/0xb70
[  849.761201][ T5611]  ? __pfx_ret_from_fork+0x10/0x10
[  849.761226][ T5611]  ? __switch_to+0xc79/0x1410
[  849.761264][ T5611]  ? __pfx_kthread+0x10/0x10
[  849.761306][ T5611]  ret_from_fork_asm+0x1a/0x30
[  849.761375][ T5611]  </TASK>
[  849.776647][ T5611] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  849.776704][ T5611] Bluetooth: hci1: failed to register connection device
[  850.407484][T11014] comedi comedi0: comedi_config --init_data is deprecated
[  851.438978][T11027] netlink: 'syz.4.1592': attribute type 1 has an invalid length.
[  851.910738][T11032] sctp: [Deprecated]: syz.0.1593 (pid 11032) Use of struct sctp_assoc_value in delayed_ack socket option.
[  851.910738][T11032] Use struct sctp_sack_info instead
[  853.907279][ T5866] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  854.417909][T11048] FAULT_INJECTION: forcing a failure.
[  854.417909][T11048] name failslab, interval 1, probability 0, space 0, times 0
[  854.417953][T11048] CPU: 1 UID: 0 PID: 11048 Comm: syz.0.1599 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  854.417985][T11048] Tainted: [L]=SOFTLOCKUP
[  854.417992][T11048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  854.418004][T11048] Call Trace:
[  854.418011][T11048]  <TASK>
[  854.418020][T11048]  dump_stack_lvl+0xe8/0x150
[  854.418049][T11048]  should_fail_ex+0x46b/0x600
[  854.418080][T11048]  should_failslab+0xa8/0x100
[  854.418110][T11048]  __kmalloc_noprof+0xdf/0x7b0
[  854.418136][T11048]  ? video_usercopy+0x1b1/0x1450
[  854.418175][T11048]  video_usercopy+0x1b1/0x1450
[  854.418213][T11048]  ? smk_tskacc+0x311/0x3a0
[  854.418247][T11048]  ? __pfx___video_do_ioctl+0x10/0x10
[  854.418283][T11048]  ? __pfx_video_usercopy+0x10/0x10
[  854.418314][T11048]  ? smack_file_ioctl+0x2c2/0x360
[  854.418361][T11048]  ? __fget_files+0x2a/0x420
[  854.418382][T11048]  ? __fget_files+0x3a6/0x420
[  854.418407][T11048]  v4l2_ioctl+0x190/0x1e0
[  854.418442][T11048]  ? __pfx_v4l2_ioctl+0x10/0x10
[  854.418473][T11048]  __se_sys_ioctl+0xff/0x170
[  854.418501][T11048]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.418528][T11048]  do_syscall_64+0x15f/0xf80
[  854.418560][T11048]  ? trace_irq_disable+0x3b/0x140
[  854.418587][T11048]  ? clear_bhb_loop+0x40/0x90
[  854.418615][T11048]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.418639][T11048] RIP: 0033:0x7f9c9330ce59
[  854.418659][T11048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  854.418679][T11048] RSP: 002b:00007f9c91566028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  854.418704][T11048] RAX: ffffffffffffffda RBX: 00007f9c93585fa0 RCX: 00007f9c9330ce59
[  854.418721][T11048] RDX: 00002000000000c0 RSI: 00000000c0d05604 RDI: 0000000000000003
[  854.418737][T11048] RBP: 00007f9c91566090 R08: 0000000000000000 R09: 0000000000000000
[  854.418751][T11048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  854.418765][T11048] R13: 00007f9c93586038 R14: 00007f9c93585fa0 R15: 00007ffda69dbae8
[  854.418802][T11048]  </TASK>
[  854.671760][ T5866] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  854.671796][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  854.671811][ T5866] usb 2-1: Product: syz
[  854.671821][ T5866] usb 2-1: Manufacturer: syz
[  854.671832][ T5866] usb 2-1: SerialNumber: syz
[  854.830160][ T5866] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  855.004822][T11050] FAULT_INJECTION: forcing a failure.
[  855.004822][T11050] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  855.004856][T11050] CPU: 1 UID: 0 PID: 11050 Comm: syz.4.1600 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  855.004879][T11050] Tainted: [L]=SOFTLOCKUP
[  855.004886][T11050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  855.004896][T11050] Call Trace:
[  855.004903][T11050]  <TASK>
[  855.004910][T11050]  dump_stack_lvl+0xe8/0x150
[  855.004937][T11050]  should_fail_ex+0x46b/0x600
[  855.004960][T11050]  _copy_from_user+0x2d/0xb0
[  855.004984][T11050]  video_usercopy+0x36f/0x1450
[  855.005015][T11050]  ? smk_tskacc+0x311/0x3a0
[  855.005035][T11050]  ? __pfx___video_do_ioctl+0x10/0x10
[  855.005062][T11050]  ? __pfx_video_usercopy+0x10/0x10
[  855.005085][T11050]  ? smack_file_ioctl+0x2c2/0x360
[  855.005120][T11050]  ? __fget_files+0x2a/0x420
[  855.005135][T11050]  ? __fget_files+0x3a6/0x420
[  855.005153][T11050]  v4l2_ioctl+0x190/0x1e0
[  855.005178][T11050]  ? __pfx_v4l2_ioctl+0x10/0x10
[  855.005201][T11050]  __se_sys_ioctl+0xff/0x170
[  855.005232][T11050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.005250][T11050]  do_syscall_64+0x15f/0xf80
[  855.005275][T11050]  ? trace_irq_disable+0x3b/0x140
[  855.005296][T11050]  ? clear_bhb_loop+0x40/0x90
[  855.005317][T11050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.005334][T11050] RIP: 0033:0x7f339124ce59
[  855.005354][T11050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.005369][T11050] RSP: 002b:00007f338f4a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  855.005387][T11050] RAX: ffffffffffffffda RBX: 00007f33914c5fa0 RCX: 00007f339124ce59
[  855.005400][T11050] RDX: 0000200000000000 RSI: 00000000c02c564a RDI: 0000000000000003
[  855.005411][T11050] RBP: 00007f338f4a6090 R08: 0000000000000000 R09: 0000000000000000
[  855.005421][T11050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  855.005431][T11050] R13: 00007f33914c6038 R14: 00007f33914c5fa0 R15: 00007ffde3e79118
[  855.005457][T11050]  </TASK>
[  855.382554][T11054] pim6reg99999991: entered allmulticast mode
[  855.393245][T11052] kAFS: No cell specified
[  855.715416][T10298] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  855.715448][T10298] CPU: 1 UID: 0 PID: 10298 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  855.715483][T10298] Tainted: [L]=SOFTLOCKUP
[  855.715493][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  855.715508][T10298] Workqueue: hci4 hci_rx_work
[  855.715545][T10298] Call Trace:
[  855.715554][T10298]  <TASK>
[  855.715566][T10298]  dump_stack_lvl+0xe8/0x150
[  855.715597][T10298]  sysfs_create_dir_ns+0x271/0x2a0
[  855.715634][T10298]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  855.715664][T10298]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  855.715704][T10298]  ? rt_spin_unlock+0x160/0x200
[  855.715734][T10298]  kobject_add_internal+0x631/0xd10
[  855.715769][T10298]  kobject_add+0x163/0x240
[  855.715812][T10298]  ? __pfx_kobject_add+0x10/0x10
[  855.715857][T10298]  ? get_device_parent+0x370/0x3a0
[  855.715890][T10298]  device_add+0x408/0xbb0
[  855.715948][T10298]  hci_conn_add_sysfs+0xd5/0x210
[  855.715984][T10298]  le_conn_complete_evt+0x10e6/0x16b0
[  855.716022][T10298]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  855.716047][T10298]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  855.716080][T10298]  ? lockdep_hardirqs_on+0x7a/0x110
[  855.716115][T10298]  ? skb_pull_data+0xfb/0x200
[  855.716145][T10298]  hci_le_conn_complete_evt+0x187/0x470
[  855.716192][T10298]  hci_event_packet+0x659/0xef0
[  855.716232][T10298]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  855.716264][T10298]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  855.716299][T10298]  ? __pfx_hci_event_packet+0x10/0x10
[  855.716330][T10298]  ? rt_spin_unlock+0x14f/0x200
[  855.716367][T10298]  ? hci_send_to_monitor+0xe2/0x590
[  855.716398][T10298]  hci_rx_work+0x3ee/0x1040
[  855.716439][T10298]  ? process_scheduled_works+0xa70/0x1860
[  855.716467][T10298]  process_scheduled_works+0xb5d/0x1860
[  855.716531][T10298]  ? __pfx_process_scheduled_works+0x10/0x10
[  855.716565][T10298]  ? assign_work+0x3d5/0x5e0
[  855.716597][T10298]  worker_thread+0xa53/0xfc0
[  855.716661][T10298]  kthread+0x388/0x470
[  855.716694][T10298]  ? __pfx_worker_thread+0x10/0x10
[  855.716717][T10298]  ? __pfx_kthread+0x10/0x10
[  855.716751][T10298]  ret_from_fork+0x514/0xb70
[  855.716781][T10298]  ? __pfx_ret_from_fork+0x10/0x10
[  855.716807][T10298]  ? __switch_to+0xc79/0x1410
[  855.716845][T10298]  ? __pfx_kthread+0x10/0x10
[  855.716878][T10298]  ret_from_fork_asm+0x1a/0x30
[  855.716927][T10298]  </TASK>
[  855.717005][T10298] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  855.717051][T10298] Bluetooth: hci4: failed to register connection device
[  855.778242][T11061] comedi comedi0: comedi_config --init_data is deprecated
[  856.255129][T11063] tipc: Can't bind to reserved service type 0
[  856.896506][T10298] ==================================================================
[  856.896525][T10298] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x902/0x1560
[  856.896630][T10298] Read of size 8 at addr ffff88803b841500 by task kworker/u9:0/10298
[  856.896651][T10298] 
[  856.896667][T10298] CPU: 0 UID: 0 PID: 10298 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  856.896698][T10298] Tainted: [L]=SOFTLOCKUP
[  856.896707][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  856.896723][T10298] Workqueue: hci4 hci_rx_work
[  856.896755][T10298] Call Trace:
[  856.896770][T10298]  <TASK>
[  856.896781][T10298]  dump_stack_lvl+0xe8/0x150
[  856.896808][T10298]  print_address_description+0x55/0x1e0
[  856.896835][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.896860][T10298]  print_report+0x58/0x70
[  856.896883][T10298]  kasan_report+0x117/0x150
[  856.896914][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.896944][T10298]  l2cap_connect_cfm+0x902/0x1560
[  856.896975][T10298]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  856.896999][T10298]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  856.897032][T10298]  ? lockdep_hardirqs_on+0x7a/0x110
[  856.897064][T10298]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  856.897095][T10298]  ? mutex_lock_nested+0x152/0x1d0
[  856.897119][T10298]  ? hci_connect_cfm+0x2c/0x140
[  856.897154][T10298]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  856.897179][T10298]  hci_connect_cfm+0x95/0x140
[  856.897217][T10298]  le_conn_complete_evt+0x1134/0x16b0
[  856.897246][T10298]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  856.897270][T10298]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  856.897301][T10298]  ? lockdep_hardirqs_on+0x7a/0x110
[  856.897333][T10298]  ? skb_pull_data+0xfb/0x200
[  856.897358][T10298]  hci_le_conn_complete_evt+0x187/0x470
[  856.897398][T10298]  hci_event_packet+0x659/0xef0
[  856.897432][T10298]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  856.897457][T10298]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  856.897538][T10298]  ? __pfx_hci_event_packet+0x10/0x10
[  856.897568][T10298]  ? rt_spin_unlock+0x14f/0x200
[  856.897597][T10298]  ? hci_send_to_monitor+0xe2/0x590
[  856.897621][T10298]  hci_rx_work+0x3ee/0x1040
[  856.897656][T10298]  ? process_scheduled_works+0xa70/0x1860
[  856.897680][T10298]  process_scheduled_works+0xb5d/0x1860
[  856.897722][T10298]  ? __pfx_process_scheduled_works+0x10/0x10
[  856.897749][T10298]  ? assign_work+0x3d5/0x5e0
[  856.897782][T10298]  worker_thread+0xa53/0xfc0
[  856.897822][T10298]  kthread+0x388/0x470
[  856.897852][T10298]  ? __pfx_worker_thread+0x10/0x10
[  856.897876][T10298]  ? __pfx_kthread+0x10/0x10
[  856.897905][T10298]  ret_from_fork+0x514/0xb70
[  856.897932][T10298]  ? __pfx_ret_from_fork+0x10/0x10
[  856.897955][T10298]  ? __switch_to+0xc79/0x1410
[  856.897990][T10298]  ? __pfx_kthread+0x10/0x10
[  856.898019][T10298]  ret_from_fork_asm+0x1a/0x30
[  856.898056][T10298]  </TASK>
[  856.898063][T10298] 
[  856.898076][T10298] Allocated by task 10298:
[  856.898089][T10298]  kasan_save_track+0x3e/0x80
[  856.898109][T10298]  __kasan_kmalloc+0x93/0xb0
[  856.898130][T10298]  __kmalloc_cache_noprof+0x3a6/0x690
[  856.898153][T10298]  l2cap_chan_create+0x51/0x7a0
[  856.898179][T10298]  l2cap_sock_new_connection_cb+0x191/0x2f0
[  856.898206][T10298]  l2cap_connect_cfm+0x368/0x1560
[  856.898228][T10298]  hci_connect_cfm+0x95/0x140
[  856.898257][T10298]  le_conn_complete_evt+0x1134/0x16b0
[  856.898278][T10298]  hci_le_conn_complete_evt+0x187/0x470
[  856.898310][T10298]  hci_event_packet+0x659/0xef0
[  856.898336][T10298]  hci_rx_work+0x3ee/0x1040
[  856.898363][T10298]  process_scheduled_works+0xb5d/0x1860
[  856.898383][T10298]  worker_thread+0xa53/0xfc0
[  856.898404][T10298]  kthread+0x388/0x470
[  856.898431][T10298]  ret_from_fork+0x514/0xb70
[  856.898453][T10298]  ret_from_fork_asm+0x1a/0x30
[  856.898478][T10298] 
[  856.898482][T10298] Freed by task 11059:
[  856.898492][T10298]  kasan_save_track+0x3e/0x80
[  856.898512][T10298]  kasan_save_free_info+0x46/0x50
[  856.898540][T10298]  __kasan_slab_free+0x5c/0x80
[  856.898560][T10298]  kfree+0x1c5/0x6c0
[  856.898578][T10298]  l2cap_sock_destruct+0x97/0x2c0
[  856.898604][T10298]  __sk_destruct+0x8d/0x9d0
[  856.898698][T10298]  l2cap_sock_cleanup_listen+0x1d9/0x580
[  856.898725][T10298]  l2cap_sock_release+0x6e/0x270
[  856.898747][T10298]  sock_close+0xc3/0x240
[  856.898779][T10298]  __fput+0x461/0xa70
[  856.898808][T10298]  task_work_run+0x1d9/0x270
[  856.898837][T10298]  exit_to_user_mode_loop+0xf3/0x4d0
[  856.898863][T10298]  do_syscall_64+0x33e/0xf80
[  856.898892][T10298]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.898912][T10298] 
[  856.898918][T10298] The buggy address belongs to the object at ffff88803b841000
[  856.898918][T10298]  which belongs to the cache kmalloc-2k of size 2048
[  856.898938][T10298] The buggy address is located 1280 bytes inside of
[  856.898938][T10298]  freed 2048-byte region [ffff88803b841000, ffff88803b841800)
[  856.898962][T10298] 
[  856.898967][T10298] The buggy address belongs to the physical page:
[  856.898978][T10298] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803b844000 pfn:0x3b840
[  856.899001][T10298] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  856.899020][T10298] flags: 0x80000000000240(workingset|head|node=0|zone=1)
[  856.899040][T10298] page_type: f5(slab)
[  856.899060][T10298] raw: 0080000000000240 ffff88801a011000 ffffea0000f19e10 ffffea0000ce5610
[  856.899081][T10298] raw: ffff88803b844000 0000000800080006 00000000f5000000 0000000000000000
[  856.899103][T10298] head: 0080000000000240 ffff88801a011000 ffffea0000f19e10 ffffea0000ce5610
[  856.899123][T10298] head: ffff88803b844000 0000000800080006 00000000f5000000 0000000000000000
[  856.899144][T10298] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[  856.899164][T10298] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[  856.899177][T10298] page dumped because: kasan: bad access detected
[  856.899188][T10298] page_owner tracks the page as allocated
[  856.899204][T10298] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5603, tgid 5603 (syz-executor), ts 100399884506, free_ts 100369846079
[  856.899243][T10298]  post_alloc_hook+0x22d/0x280
[  856.899265][T10298]  get_page_from_freelist+0x27c8/0x2840
[  856.899293][T10298]  __alloc_frozen_pages_noprof+0x18d/0x380
[  856.899319][T10298]  allocate_slab+0x77/0x660
[  856.899347][T10298]  refill_objects+0x33c/0x3d0
[  856.899373][T10298]  __pcs_replace_empty_main+0x373/0x720
[  856.899404][T10298]  __kmalloc_node_track_caller_noprof+0x60b/0x7e0
[  856.899429][T10298]  pskb_expand_head+0x230/0x1390
[  856.899460][T10298]  netlink_trim+0x1b3/0x2c0
[  856.899521][T10298]  netlink_broadcast_filtered+0x80/0xea0
[  856.899547][T10298]  nlmsg_notify+0xf0/0x1a0
[  856.899573][T10298]  __dev_notify_flags+0xf2/0x310
[  856.899639][T10298]  rtnl_newlink_create+0x657/0xb70
[  856.899688][T10298]  rtnl_newlink+0x166a/0x1bb0
[  856.899714][T10298]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  856.899739][T10298]  netlink_rcv_skb+0x232/0x4b0
[  856.899772][T10298] page last free pid 5605 tgid 5605 stack trace:
[  856.899786][T10298]  __free_frozen_pages+0xfa6/0x10f0
[  856.899808][T10298]  __slab_free+0x252/0x2a0
[  856.899831][T10298]  qlist_free_all+0x99/0x100
[  856.899850][T10298]  kasan_quarantine_reduce+0x148/0x160
[  856.899869][T10298]  __kasan_slab_alloc+0x22/0x80
[  856.899891][T10298]  __kmalloc_cache_noprof+0x338/0x690
[  856.899913][T10298]  netdevice_event+0x3cb/0x8f0
[  856.900019][T10298]  notifier_call_chain+0x1ad/0x3d0
[  856.900047][T10298]  __netdev_upper_dev_link+0xa8a/0xc80
[  856.900071][T10298]  netdev_upper_dev_link+0xb0/0x100
[  856.900095][T10298]  ipvlan_link_new+0x606/0xa70
[  856.900127][T10298]  rtnl_newlink_create+0x329/0xb70
[  856.900154][T10298]  rtnl_newlink+0x166a/0x1bb0
[  856.900178][T10298]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  856.900202][T10298]  netlink_rcv_skb+0x232/0x4b0
[  856.900228][T10298]  netlink_unicast+0x780/0x920
[  856.900253][T10298] 
[  856.900258][T10298] Memory state around the buggy address:
[  856.900272][T10298]  ffff88803b841400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  856.900288][T10298]  ffff88803b841480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  856.900302][T10298] >ffff88803b841500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  856.900314][T10298]                    ^
[  856.900325][T10298]  ffff88803b841580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  856.900342][T10298]  ffff88803b841600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  856.900354][T10298] ==================================================================
[  856.900497][T10298] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  856.900522][T10298] CPU: 0 UID: 0 PID: 10298 Comm: kworker/u9:0 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[  856.900557][T10298] Tainted: [L]=SOFTLOCKUP
[  856.900565][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  856.900581][T10298] Workqueue: hci4 hci_rx_work
[  856.900616][T10298] Call Trace:
[  856.900624][T10298]  <TASK>
[  856.900633][T10298]  vpanic+0x56c/0xa60
[  856.900666][T10298]  ? __pfx_vpanic+0x10/0x10
[  856.900698][T10298]  panic+0xc5/0xd0
[  856.900723][T10298]  ? __pfx_panic+0x10/0x10
[  856.900751][T10298]  ? preempt_schedule_thunk+0x16/0x30
[  856.900798][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.900826][T10298]  ? preempt_schedule_thunk+0x16/0x30
[  856.900861][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.900883][T10298]  check_panic_on_warn+0x89/0xb0
[  856.900917][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.900942][T10298]  end_report+0x73/0x170
[  856.900967][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.901098][T10298]  kasan_report+0x128/0x150
[  856.901199][T10298]  ? l2cap_connect_cfm+0x902/0x1560
[  856.901266][T10298]  l2cap_connect_cfm+0x902/0x1560
[  856.901354][T10298]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  856.901421][T10298]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  856.901509][T10298]  ? lockdep_hardirqs_on+0x7a/0x110
[  856.901593][T10298]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  856.901672][T10298]  ? mutex_lock_nested+0x152/0x1d0
[  856.901738][T10298]  ? hci_connect_cfm+0x2c/0x140
[  856.901838][T10298]  ? __pfx_l2cap_connect_cfm+0x10/0x10
[  856.901908][T10298]  hci_connect_cfm+0x95/0x140
[  856.902023][T10298]  le_conn_complete_evt+0x1134/0x16b0
[  856.902103][T10298]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  856.902168][T10298]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  856.902249][T10298]  ? lockdep_hardirqs_on+0x7a/0x110
[  856.902327][T10298]  ? skb_pull_data+0xfb/0x200
[  856.902391][T10298]  hci_le_conn_complete_evt+0x187/0x470
[  856.902491][T10298]  hci_event_packet+0x659/0xef0
[  856.902550][T10298]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  856.902604][T10298]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  856.902708][T10298]  ? __pfx_hci_event_packet+0x10/0x10
[  856.902814][T10298]  ? rt_spin_unlock+0x14f/0x200
[  856.902892][T10298]  ? hci_send_to_monitor+0xe2/0x590
[  856.902960][T10298]  hci_rx_work+0x3ee/0x1040
[  856.903041][T10298]  ? process_scheduled_works+0xa70/0x1860
[  856.903113][T10298]  process_scheduled_works+0xb5d/0x1860
[  856.903221][T10298]  ? __pfx_process_scheduled_works+0x10/0x10
[  856.903290][T10298]  ? assign_work+0x3d5/0x5e0
[  856.903354][T10298]  worker_thread+0xa53/0xfc0
[  856.903460][T10298]  kthread+0x388/0x470
[  856.903535][T10298]  ? __pfx_worker_thread+0x10/0x10
[  856.903591][T10298]  ? __pfx_kthread+0x10/0x10
[  856.903675][T10298]  ret_from_fork+0x514/0xb70
[  856.903746][T10298]  ? __pfx_ret_from_fork+0x10/0x10
[  856.903812][T10298]  ? __switch_to+0xc79/0x1410
[  856.903905][T10298]  ? __pfx_kthread+0x10/0x10
[  856.903981][T10298]  ret_from_fork_asm+0x1a/0x30
[  856.904097][T10298]  </TASK>
[  856.910088][T10298] Kernel Offset: disabled